黑客伪造邮件骗取国外客户货款(转载)

曝光一些钓鱼邮件
2017-11-23
阿里巴巴的询盘(已有人被骗),不是黑客,不是GMAIL的原因,是自己操作不当
2017-11-24

黑客伪造邮件骗取国外客户货款(转载)

最近一个月几个客户中招,损失虽不多,但是给我一个警示,业务员自己要有个高度警惕,外来链接不要随便打开。

这个骗子是尼日利亚的,在阿里巴巴询盘注册地址美国,在我回复他询盘之后,IP地址显示尼日利亚,这些我都没有很放心上。回复邮件中他提出要求让我回复他的私人邮箱,接着就回了封很长的邮件给我,要打开一个链接才能看到他的采购order。

Below is the link to a shared file,kindly click the link to get full details of our order including required quantity and pictures of a sample product model we have previously produced.

You have to login with your company valid registered email address to enable the link open for you to see the details of our product.

click on the link below to see the product sample or Copy the link below and paste on your browser and click enter to see the product samples.

(这里是链接)

我当时是马上就打开了,完全没有一点警戒心(这方面实在菜鸟),这以后完全没有消息了。

接着1个月后,在自助查询处有登录查询,20/8/2012在尼日利亚被登录成功了(冷汗啊)。所以大家没事也可看看邮箱是否有登录异常的状况,我们是企业邮箱。
在窃取邮箱信息成功后,他还设置了自动转发,之后注册了与我类似的邮箱地址,跟我的客户联系,也同时注册了几个客户的类似邮箱地址,用来跟我联系,成了我们的中间人,回复邮件习惯了就邮件上点击回复,这样直到订单确认,我都是跟骗子,骗子再跟客户邮件联系,当然邮件绝对是一样的,只有到要给客户说换西联汇款时,才在我原基础上改了再发一次,客户也豪无可疑,都是解释TT账号在做年审,所以…..有一个封非常之自然,让客户无从有怀疑之心。

Also as I said before, if choice air freight, the airport of Lisbon, charge freight will be 836.0usd. i will await to confirm your payment through western union Money transfer to our location in London.please update with the payment slip once you have made the payment through western union Money transfer.

另一个很官方:

Thanks for the email, we are sorry for the inconveniency we may cause you as a result of this payment, our account is under Monthly review and auditing because of it payment cannot be received through it, that is why we asked you to make the payment to our location in London,

Below are the some locations of western union in Denmark, Kindly find the location below nearest to you and make the payment as soon as possible, send to us the payment slip after the payment.

我的总结是:
1)不要轻易去打开不熟悉客户的链接,有些那种长篇累牍的就可能是;
2)平时回复邮件前留意一下客户的邮箱,是不是有异常,或者不要在原邮件回;
3)在确认付款时,在发PI时也连同在邮件中附上,如遇到更改账号付款或者西联汇款请客户不要轻易相信,即时与我们电话联系确认。
4)如果跟客户熟悉了,有交易的话,skype或者MSN 非常有必要,这样在确认付款时这些聊天工具也是可以同时确认,就不仅仅依赖电子邮件了。
5)在家个人电脑也常杀杀毒,养成这个习惯。

其实要是真在这个过程中,我们细心的话会发现到一些疑点,没碰到的外贸朋友要留个心,我现在还在跟两个被骗的客户纠缠,非常之生气,希望我一切顺利,后续圆满的解决的话,我会接着写上来!

你可能会喜欢

如何google优化,google SEO我的英文外贸网站?

如何做一个符合英文SEO的网站?

2018年最新谷歌搜索引擎免费入口,100个英文搜索引擎免费入口

如何发英文外贸网站外链?

现在是内容为王的SEO时代,如何发布产品内容,更加有利于SEO?