a compass with the words chance, success, risk and failure on the face
Robert L. Weiner: Nonprofit Fundraising Technology Consulting
  • Home
  • Clients
  • About
    • Testimonials
    • Articles by Robert Weiner
    • Presentations by Robert Weiner
    • Services
      • Staffing
      • On-Call Advice
  • Contact

Lame spams of the day: Fake Facebook notifications

September 10, 2012 by Robert 4 Comments

Lots of spammers try to use fake Facebook notifications to trap the unwary.  Here’s a sample of what’s landed in my spam folder.  All but the last one used graphics that made them look like the came from Facebook.

Senders:
Facebook [update+fqqrnmjhudim@atse.org.au]
Facebook [update+dxyfrdccslte@csj.g12.br]
Facebook [updateV995O9DZ34L9@facebookmail.com]
Facebook [update+uIsYkDkEcuHyrBRXzixWMnatposl1@snik.be]
Facebook [update+YJAKHLlIWryYDRlsGSOvxkunDEpv1@fabioleonardi.it]
Facebook [welcome+robert@zamilglass.com]

Subjects:
Confirm your account on Facebook
You have notifications pending
Reminder: Joanna Gould invited you to join Facebook…
Reminder: Courtney Wilkins invited you to join Facebook…
Welcome to the Family Mall

Sample 1:
Hi robert@rlweiner.com,
You joined Facebook, but you still haven’t confirmed your account.
To confirm, simply follow this link:
http://www.facebook.com/n/?confirmemail.php&e=robert%40rlweiner.com&c=48182369&mid=D4CB33b1b9bDcd6715c2C2Cf26C4Bf62&code=48182369&n_m=robert%40rlweiner.com (in one case the link leads to http://bur-nak.com/tab/let/s/ and in another it leads to http://erpenpencere.com/tab/let/s/)
And that’s it! Once you do this, you’ll have access to all of Facebook’s features.
Important: After today, you’ll be unable to log in to your Facebook account until you complete this step.
You may be asked to enter this confirmation code: 48182369
Again, welcome!
Thanks,
The Facebook Team

Sample 2:
Hi,
Here’s some activity you may have missed on Facebook.

Adelyn HESS has posted statuses, photos and more on Facebook.
(link leads to http://assessoriacambrils.com/inmobiliaria/index.php?route=common/page5.htm?TXOJW7N=XPFHXFRJ&ZIUVBY=ZXFFBVPQBIASV0SU9G2AU&TWW=26CX5RF0F20VO&1KST4O4=A4OQRHFC06&EL8ND=7JL4QAGPQFUHFET92V&SSF=LN503LBH6DKT0ENN26UWZI&)

Sample 3:
Hi,
Here’s some activity you have missed on Facebook. No matter how far away you are from friends and family, Facebook can help you stay connected.
Other people have asked to be your friend on Facebook. Accept this invitation to see your previous friend requests

4 friend request (in one case the link points to http://cozydrycleaners.com/trace/a/b/c/d/ while another points to http://lingerieshoppy.co.uk/up/load/)

Sample 4:
This one makes no attempt other than the sender’s name to look like it has anything to do with Facebook:

Welcome to our Online Shop
Whether it’s a cold or flu in the winter, allergies in the spring, or taking care of yourself in the summer sun, we’ve got what you need.

You can now take part in the various services we have to offer you. Some of these services include:

Permanent Cart – Any products added to your online cart remain there until you remove them, or check them out.
Order History – View your history of purchases that you have made with us.

Explore Service Online (link leads to http://carettypeab.net/)
This email address was given to us by one of our customers:
robert@rlweiner.com

Robert

Comments

  1. Robert says

    December 6, 2012 at 10:11 am

    I got a new batch this week. The senders were:

    Facebook Security Team [impressiveness610@hendrickauto.com]
    Facebook [panhandledu5@amx.com]
    Facebook [deescalatet@marston.com]
    Facebook Team [barabbasvxio9823@eurobiobiz.com]
    Facebook [previouslyj94@mc2school.org]

    The subjects were:

    You have notifications pending
    Your download is ready
    Most recent events on Facebook
    Most recent comments on your status update
    New events on Facebook

    The text was along the lines of:

    You have deactivated your Facebook account. You can recover your account whenever you wish by logging onto Facebook with your old login email address and password. You will then be able to utilize the service as usual.
    follow the link below :
    http://www.facebook.com/home.php

    If this was you, please pass over this email. If this wasn’t you, please secure your account, as some hacker may be used it.

    Some said I’ve purged my Facebook account, some that I’d blocked it.
    The link that claims to lead to facebook.com actually points to another site, presumably a malware delivery site.

  2. Jerry Davis says

    February 13, 2014 at 9:08 pm

    I received something similar to #2 above and now my entire Facebook account doesn’t exist.

    Is there anything I can do about this?

    Thanks,

  3. Jerry Davis says

    February 13, 2014 at 9:09 pm

    Can I get my FB pages, contacts, etc back?

  4. Robert Weiner says

    February 14, 2014 at 7:57 am

    Jerry — Have you tried contacting Facebook?

Leave a Reply

Your email address will not be published. Required fields are marked *

Footer #Left

This is an example of a widget area that you can place text to describe a product or service. You can also use other WordPress widgets such as recent posts, recent comments, a tag cloud or more.

Footer #Right

This is an example of a widget area that you can place text to describe a product or service. You can also use other WordPress widgets such as recent posts, recent comments, a tag cloud or more.

Copyright ©2017 Robert L. Weiner: Nonprofit Fundraising Technology Consulting

  • Home
  • Clients
  • About
    • Testimonials
    • Articles by Robert Weiner
    • Presentations by Robert Weiner
    • Services
      • Staffing
      • On-Call Advice
  • Contact