eCard phishing

I have gotten two eCard notices in the last few days that looked, well, phishy. The messages I received were pretty crude which made them easier to spot, but it is something to be aware of anytime you receive an eCard or any e-mail that contains a link.

It is best not to click on a link in any e-mail that you weren’t expecting or aren’t sure of. I mean, really, what’s the chance that you have a secret admirer out there? If you do, do you really want to read the weirdo’s eCard?

It is also good to get in the habit of checking to make sure the URL text in any e-mail matches the URL of the link. Most Windows e-mail clients show this in the status bar or as a pop-up message when your mouse is over the link. Also realize that a URL like yourvisacardcompany.evilperson.com goes to the domain of evilperson.com not yourvisacardcompany. Sometimes evilperson is sneaky and will use a URL with a number similar to yourvisacardcompany.127.0.0.1.

I can’t find any specifics about the fake eCards I received, but they’re probably trying to install a virus similar to the friendgreetings . com scam in 2003. There is also information about eCard phishing on this blog post.