|
Better Business Bureau is alerting consumers and businesses about a new phishing attack that resembles an e-mail confirmation claiming the recipient has filed a complaint with BBB about a business. The malicious e-mails first came to the attention of BBB on Thursday, October 15.
When consumers file a complaint with BBB about a business, they may often receive a confirmation e-mail and subsequent follow-up e-mails from BBB on the status of their complaint. The malicious phishing e-mail attack is designed to mimic a confirmation e-mail from BBB and includes the full name of the recipient and the name of the company they supposedly filed a complaint about.
According to reports to BBB, individuals who have received this e-mail have not actually filed a complaint with BBB but are, instead, employed by the business the e-mail claims they have filed a complaint about.
Anyone who receives a complaint e-mail confirmation claiming to be from BBB, but has not actually filed a complaint with BBB, should not click on any links in the e-mail. Instead, either delete the message or forward it to: phishing@council.bbb.org
Following is a copy of an actual e-mail associated with this recent phishing attack:
----------------------------------------------
From: Better Business Bureau [mailto:complaintsmajdivision@complaints.bbb.org]
Sent: Thursday, October 15, 2009 2:42 PM
To: [Redacted]
Subject: Complaint Update for [Recipient name varies], [Company name varies by recipient] (Case id: #0509E2)
Dear Mr. [Redacted],
This is an automated e-mail that confirms the registration of your complaint case number: #0509E2 filed by [Company name varies by recipient] on September 17/2007 concerning Online Identity Theft.
While Better Business Bureau does not resolve individual consumer problems, your complaint helps us investigate fraud, and can lead to law enforcement action.
You can download a copy of your complaint from http://www.yilan.com.tw/ht....[full hyperlink redacted]. Please print and keep this copy for your personal records.
We use secure socket layer (SSL) encryption to protect the transmission of the information you submit to us when you use our secure online forms. The information you provided to us is stored securely.
The BBB strongly encourages consumers to first attempt to resolve complaints directly with the company, however the BBB will not reject a complaint if a consumer has not taken this step. All complaints are processed by local Better Business Bureaus, most often the Bureau where the company is located. Historically, over 70% of complaints through the BBB are resolved. In some cases, BBB mediation or arbitration may be offered to assist in resolution.
Your complaint will be forwarded to the company within two business days. The company will be asked to respond within 14 days, and if a response is not received, a second request will be made. You will be notified of the company's response when we receive it (or notified that we received no response). Complaints are usually closed within 30 calendar days.
The form you used to register this complaint is designed to improve public access to the Better Business Bureau of Consumer Protection Consumer Response Center, and is voluntary. Through this form, consumers may electronically register a complaint with the BBB.Under the Paperwork Reduction Act, as amended, an agency may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it displays a currently valid OMB control number.
Our staff will keep you updated regarding the status of our investigation. To check the status of your complaint please access http://www.yilan.com.tw/ht... [full hyperlink redacted]
|