I got a dozen of these yesterday. Most of them showed the sender as “Milton Ballard” so hopefully they won’t fool anyone. But the last one came from BillingOnline@fedex.com so it was slightly more convincing. The subject lines included:
Please pay your outstanding Fedex invoice.
New Fedex Invoice
Your Fedex invoice is ready to be paid now.
Pay your Fedex invoice online.
Your Fedex invoice is ready.
They all had the same basic format, only the account number changed. And they all misspelled “invoices”.
Hello robert@rlweiner.com
You have a new outstanding invoice(s) from FedEx that is ready for payment.
The following ivoice(s) are to be paid now :
Invoice Number
3611-87718
To pay or review these invoices, please sign in to your FedEx Billing Online account by clicking on this link: http://www.fedex.com/us/account/fbo
Note: Please do not use this email to submit payment. This email may not be used as a remittance notice. To pay your invoices, please visit FedEx Billing Online, http://www.fedex.com/us/account/fbo
Thank you,
Revenue Services
FedEx
The links lead to:
http://taxiwestport.ie/wp-content/uploads/fgallery/logfed.html
http://albumake.com/wp-content/uploads/fgallery/fedinv.html
http://phuket-estate-agents.com///fedinv.html
http://woookie.org/fedinv.html
http://upskirts.ru.gp/fedinv.html
http://marketyourbiz.com.tw/fedinv.html
http://bluelightpictures.com/fedinv.html
http://upturnbar.com.br/wp-content/uploads/fgallery/fedinv.html
http://jocelynafox.com/wp-content/uploads/fgallery/fedinv.html
http://mathildahope.com/wp-content/uploads/fgallery/fedinv.html
http://onecaselawperday.com/fedinv.html
http://upturnbar.com.br/wp-content/uploads/fgallery/fedinv.html
Here’s a screenshot:
I just got the same and I’ve wondered is it scam because it looks like real. Thanks for sharing the info, hopefully more users will stay away of such scammers.
Thanks for posting? Whatever the offenders outbound email program of choice didn’t give any clue of the messages origin. I will add the domain names to my firewall. And add to project honeypot!
TTSS
Thanks for posting. I just received the email today so it is still going around. It also got past the firewall on my work email which usually blocks these.
Thanks for posting this just received it this morning and was almost convinced as am waiting for an invoice from Fedex
I got this email that said it was from FedEx.
I called FedEx and they told me it wasn’t from FedEx so I thought you might know about something like this.
Here’s two screen shots and a copy of the Email.
____________________________________________________________________
> From: “Logistics Services”
> Date: June 7, 2013, 3:03:04 PM PDT
> To: tattoocritter@aol.com
> Subject: FedEx Delivery Status Notification ID#EN859965338M
> Reply-To: “Logistics Services”
>
> Fed Ex
>
> Dear Client,
>
> Your parcel has arrived at May 25. Courier was unable to deliver the parcel to you.
>
> To receive your parcel, print this label and go to the nearest office.
>
>
>
> Print Shipment Label
>
> FedEx Customer Service Team.
> FedEx 1995-2013
If it’s not from FedEx just delete it (and definitely don’t click on any of the links). No good can come from it.