{"id":2916,"date":"2019-04-06T19:34:16","date_gmt":"2019-04-06T19:34:16","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=2916"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"StubHub-Phishing-Scam-Email","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=2916","title":{"rendered":"StubHub Phishing Scam Email"},"content":{"rendered":"<div>\n<h2>Outline<\/h2>\n<p>Email, purporting to be from ticket buying and selling marketplace StubHub, supposedly provides order details for the purchase of tickets to a boxing match in Las Vegas. \u00a0 <\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Top Content Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"4870821038\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<h2>Brief Analysis<\/h2>\n<p>The email is not from StubHub. The message is a phishing scam designed to trick recipients into divulging their credit card details to cybercriminals.<\/p>\n<h2>Example<\/h2>\n<div class=\"example\">\n<p><b>Subject: Order Placed &#8211; Ticket Order #47223311<\/b> \u00a0Thanks for your order! We&#8217;ve instructed the seller to confirm your order within the next 48 hours. After the seller confirms your order, you can expect your tickets to be delivered by the date below. Expected delivery date: Monday, 10\/31\/2011 (based on seller estimate)<\/p>\n<p>Note: Your card has been authorized for the amount of your order but has NOT YET BEEN CHARGED. You will be charged when the seller confirms your order. Please review the information below. Thanks for shopping at StubHub!<\/p>\n<p>Login to StubHub! to view your order confirmation.<\/p>\n<p>Order info<br \/>\nOrder #: 47223311 | Order date: 10\/27\/2011<br \/>\nManny Pacquiao vs Juan Manuel Marquez Boxing Tickets at MGM Grand Garden Arena, Las Vegas, NV<br \/>\nSaturday, 11\/12\/2011 03:00 p.m. (PST) (Event time subject to change &#8211; Check local listings)<br \/>\nQuantity: 2 tickets<br \/>\nSection: Lower 17<br \/>\nRow: S | Seats: 16, 17<br \/>\nShipping info<br \/>\nThis shipment will be sent to:<br \/>\nA Smith<br \/>\n5953 S Denker Ave<br \/>\nLos Angeles, CA 90047<br \/>\nUS<br \/>\nShipping method: FedEx Standard Overnight<br \/>\nWe don&#8217;t have a FedEx tracking number for you yet. We&#8217;ll send it with your order confirmation email.<br \/>\nBilling info<br \/>\nPrice per ticket: $1250.00<br \/>\nQuantity: x 2<br \/>\nSubtotal: $2500.00<br \/>\nService fee: + $250.00<br \/>\nDelivery services: + $16.95<br \/>\nOrder total: $2766.95<br \/>\nCredit card:<br \/>\nThe credit or debit card has been authorized but has not yet been charged. Your card will be charged within the next 48 hours.<\/p>\n<p>Thanks for using StubHub!<br \/>\nIf you have any questions, comments, or concerns, please contact us.<br \/>\nStubHub Customer Service<br \/>\nWeekdays: 5:00 a.m. &#8211; 8:00 p.m. (Pacific time)<br \/>\nWeekends: 6:00 a.m. &#8211; 7:00 p.m. (Pacific time)<\/p>\n<p>StubHub! Where fans buy and sell ticketsTM<\/p>\n<p>StubHub Email ID: TEB_ORDER_PLACED_FDXTIH<\/p>\n<\/div>\n<p>&nbsp;<\/p>\n<h2>Detailed Analysis<\/h2>\n<p>As phishing scams go, this one is somewhat more sophisticated than most. The scam message, which purports to be from online ticket marketplace \u00a0<a class=\"norm\" title=\"StubHub\" href=\"http:\/\/www.stubhub.com\/\">StubHub<\/a>, disguises itself as an order for tickets to a boxing match to be held in Las Vegas.<\/p>\n<p>According to the email, the total cost of the tickets comes to a hefty $2766.95, although it assures the recipient that his or her credit card has been authorized for that amount but not yet charged.<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block; text-align:center;\"\n     data-ad-format=\"fluid\"\n     data-ad-layout=\"in-article\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"9162856233\"><\/ins><br \/>\n<script>\n     (adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p> And therein hides the hook in this particular phishing expedition. Some recipients, panicked by the mistaken notion that their credit card details have been stolen and used to purchase the tickets, will follow the link to view their order confirmation as instructed in the scam message. Once on the bogus website that the link opens, victims will be told that they can review and cancel the supposed transaction &#8211; but only by submitting credit card details and other personal information to verify their right to do so. Of course, any information submitted on the bogus website can then be harvested by scammers and used for credit card fraud and identity theft.<\/p>\n<p>StubHub issued the following warning to customers via its website and \u00a0<a class=\"norm\" title=\"StubHub Facebook Page\" href=\"https:\/\/www.facebook.com\/Stubhub?sk=wall\">Facebook Page<\/a>:<\/p>\n<blockquote>\n<p><i>We are aware that some people have received an email regarding order number 47223311, which they did not place. The email is a phishing email, and was NOT sent by StubHub or any affiliate. Your credit cards have not been charged. Please DO NOT click on any link in the email. If you have logged in to your account via one of the links in the email, you should log into your StubHub account immediately (https:\/\/www.stubhub.com\/account\/) to change your StubHub password.<\/i><\/p>\n<p>If you have not clicked on any of the links contained in the email, you can safely delete it.<\/p>\n<\/blockquote>\n<p>It appears that the scam website has now been shut down, but other incarnations of the scam may follow.<\/p>\n<p>Phishing scammers and malware distributors have often used \u00a0<a href=\"https:\/\/www.hoax-slayer.net\/dell-online-store-trojan-email\/\">fake order notifications<\/a> \u00a0as a means of enticing potential victims to follow links or \u00a0open attachments.<\/p>\n<p>Be wary of any unsolicited email that claims that you have made purchases or transactions that you know nothing about. If you receive such an email, do not follow any links or open any attachments that it may contain. If you are concerned about possible unauthorized transactions, check directly with the company or financial institution involved.<\/p>\n<p><\/br><\/br> Original Source : <a href=\"https:\/\/www.hoax-slayer.net\/stubhub-phishing-scam-email\/\" target=\"_blank\">https:\/\/www.hoax-slayer.net\/stubhub-phishing-scam-email\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Outline Email, purporting to be from ticket buying and selling marketplace StubHub, supposedly provides order details for the purchase of tickets to a boxing match in Las Vegas. \u00a0 Brief Analysis The email is not from StubHub. The message is a phishing scam designed to trick recipients into divulging their credit card details to cybercriminals. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2916","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hoax-inggris"],"_links":{"self":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/2916"}],"collection":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2916"}],"version-history":[{"count":0,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/2916\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}