Here’s a variation on the “Please view my resume” and “Amazon shipping label” scam I just received (again): it’s a message, claiming to be from my webmail provider (absolute proof that it’s a scam in my case, because I’m the webmail provider!) requiring me to re-validate my — unspecified — account by opening the attachment.

Yeah… right.

In this case, it’s a straight phishing scam aimed at stealing your identity and your webmail account, wherever you have that webmail account (your workplace, Hotmail, Yahoo, etc).

The usual stuff still applies: poor English, literal spelling and really obvious grammatical mistakes, etc.

Here’s an example of the spam message:

And here’s what the attachment looks like:

Don’t be fooled. It‘s an identity theft scam. When you try to “log in”, the form content is sent to the scammer. The other links are simply there to make it appear more legitimate.

The first three lines are the only ones that matter.