<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>SuckerBait.info &#187; UPS</title>
	<atom:link href="http://suckerbait.info/tag/ups/feed/" rel="self" type="application/rss+xml" />
	<link>http://suckerbait.info</link>
	<description></description>
	<lastBuildDate>Tue, 31 Jan 2012 19:42:40 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>UPS Scam</title>
		<link>http://suckerbait.info/ups-scam/</link>
		<comments>http://suckerbait.info/ups-scam/#comments</comments>
		<pubDate>Sun, 27 Mar 2011 01:11:06 +0000</pubDate>
		<dc:creator>John Counsel</dc:creator>
				<category><![CDATA[Adware]]></category>
		<category><![CDATA[BotNets]]></category>
		<category><![CDATA[Identity Theft]]></category>
		<category><![CDATA[Keyloggers]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Online Scams]]></category>
		<category><![CDATA[Phishing scams]]></category>
		<category><![CDATA[Spam Dangers]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[Viruses and Worms]]></category>
		<category><![CDATA[attachment]]></category>
		<category><![CDATA[UPS]]></category>

		<guid isPermaLink="false">http://suckerbait.info/?p=259</guid>
		<description><![CDATA[Here&#8217;s another old favourite suddenly hitting mailservers again: the United Parcel Service scam. UPDATE: Now that we&#8217;ve received several hundred copies of this phishing scam spam (and you weren&#8217;t convinced that it&#8217;s not legit?) we&#8217;re noticing that the latest batches have no attachment icon/link at the foot of the message body. Your email client (application) [...]]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s another old favourite suddenly hitting mailservers again: the <strong>United Parcel Service</strong> scam.</p>
<p><a href="http://suckerbait.info/2011/03/27/ups-scam/ss-ups-scam-2/" rel="attachment wp-att-260" ><img class="size-full wp-image-260 aligncenter" style="border: 1px solid black;" title="ss-UPS-scam" src="http://suckerbait.info/wp-content/uploads/2011/03/ss-UPS-scam.png" alt="" width="369" height="369" /></a></p>
<p><strong>UPDATE</strong>: Now that we&#8217;ve received <em>several hundred</em> copies of this phishing scam spam (and you weren&#8217;t convinced that it&#8217;s not legit?) we&#8217;re noticing that <em>the latest batches have <strong>no attachment icon/link</strong> at the foot of the message body.</em> Your email client (application) should display a download option like this one:</p>
<p style="text-align: center;"><a href="http://suckerbait.info/2011/03/27/ups-scam/ss-ups-scam-sneaky/" rel="attachment wp-att-276" ><img class="size-full wp-image-276 alignnone" style="margin: 0px; border: 1px solid black;" title="ss-ups-scam-sneaky" src="http://suckerbait.info/wp-content/uploads/2011/03/ss-ups-scam-sneaky.png" alt="sneaky version of UPS phishing email" width="456" height="312" /></a></p>
<p><span style="color: #bb0000;"><em><strong>Delete this as soon as you see it.</strong></em></span> Open the attachment and you risk handing control of your PC (and even your network) to phishing or spam gangs. You should <strong><span style="text-decoration: underline;">NEVER</span></strong> open an email attachment unless…</p>
<ul>
<li>You know the person who sent it.</li>
<li>You&#8217;re expecting it.</li>
<li>You know exactly what the document is.</li>
</ul>
<p><span style="color: #ffffff;"> .</span></p>
]]></content:encoded>
			<wfw:commentRss>http://suckerbait.info/ups-scam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>UPS fake invoice scam</title>
		<link>http://suckerbait.info/ups-fake-invoice-scam/</link>
		<comments>http://suckerbait.info/ups-fake-invoice-scam/#comments</comments>
		<pubDate>Thu, 27 May 2010 19:38:56 +0000</pubDate>
		<dc:creator>John Counsel</dc:creator>
				<category><![CDATA[Adware]]></category>
		<category><![CDATA[BotNets]]></category>
		<category><![CDATA[Keyloggers]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Online Scams]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[Viruses and Worms]]></category>
		<category><![CDATA[errors]]></category>
		<category><![CDATA[puncuation]]></category>
		<category><![CDATA[UPS]]></category>

		<guid isPermaLink="false">http://suckerbait.info/?p=110</guid>
		<description><![CDATA[This is a common malware/botnet scam claiming to be from UPS. It's not.

Tell-tale signs include names in the BCC: field (valid emails never display the content of the BCC:, or BLIND Carbon Copy, field — that's the whole point of that field, to mask the addresses), and really obvious errors in the English used. Punctuation errors, too.


]]></description>
			<content:encoded><![CDATA[<p>This is a common malware/botnet scam claiming to be from <strong>UPS</strong>. It&#8217;s not.</p>
<p>Tell-tale signs include <strong>names in the BCC: field</strong> (valid emails <em>never</em> display the content of the BCC:, or BLIND Carbon Copy, field — that&#8217;s the whole point of that field, to mask the addresses), and really <strong>obvious errors in the English</strong> used. Punctuation errors, too.</p>
<p><a href="http://suckerbait.info/2010/05/28/ups-fake-invoice-scam/ss-ups-scam/" rel="attachment wp-att-111" ><img class="aligncenter size-full wp-image-111" title="ss-UPS scam" src="http://suckerbait.info/wp-content/uploads/2010/05/ss-UPS-scam.png" alt="" width="372" height="278" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://suckerbait.info/ups-fake-invoice-scam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

