Posts tagged with: phishing

Scam text message from (509) 387-9884

Watch out for a text message that is attempting to get you to enter your Amazon login like this. Amazon will not send you a text message like this:

“Amazon Order Review - Your Refund Has Been Approved

Dear Customer,
Following a recent review of our marketplace activity, we identified that a seller associated with your previous purchase failed to meet Amazon's operational standards. The seller has since been removed from our platform.

As a result, you are entitled to a full refund, with no need to return the product. This action will not affect your account or purhcase history in any way.

Please click the secure link below to confirm your refund:
[bit.ly link redacted]

Thank you for shopping with Amazon.
-Amazon Customer Support
{3N:E8:91:61:QV:L6:YD:KC:NP}”

I’m reporting the link to bit.ly using their report abuse page.

Nerd stuff:

This was a group message, including nine other numbers. It was also an RCS message, not SMS, and was end-to-end encrypted.

Various Unicode letters were used, making the text appear bold every few words. For example, it used the Unicode “mathematical sans-serif bold” characters to spell out “Amazon.” Most likely this was an attempt to avoid triggering spam filters, though my Android automatically prompted “report this as suspected spam?”

Bit.ly’s link checker indicates the destination was guoqushangmao dot com. Obviously, I do not recommend visiting that domain.