Online Threat Alerts (OTA) - Alerting you to scams and frauds.
The Delta confirmation receipt and itinerary e-mail message below is a fake and is malicious. This e-mail was sent by hackers or scammers in an attempt to trick their victims into clicking on the links in it. The links will take you to malicious websites that will infect your computer with malicious programs using the BlackHole Exploit kit. Do not click on or go to any of the links in this e-mail message.
From: DELTA CONFIRMATION [mailto:cggQozvOc@sutaffu.co.jp]Subject: Your Receipt and ItineraryThank you for choosing Delta. We encourage you to review this information before your trip.If you need to contact Delta or check on your flight information, go to delta.com/itinerariesNow, managing your travel plans just got easier. You can exchange, reissue and refund electronic tickets at delta.com/itineraries.Take control and make changes to your itineraries at delta.com/itineraries.Speed through the airport. Check-in online for your flight.Check-inFlight InformationDELTA CONFIRMATION #: D0514B3TICKET #: 00920195845933Bkng Meals/ Seat/Day Date Flight Status Class City Time Other Cabin--- ----- --------------- ------ ----- ---------------- ------ ------ -------Mon 11MAR DELTA 372 OK H LV NYC-KENNEDY 820P F 19CAR SAN FRANCISCO 8211P COACHFri 15MAR DELTA 1721 OK H LV LOS ANGELES 1145P V 29AAR NYC-KENNEDY 812A# COACHCheck your flight information online at delta.com/itineraries
From: DELTA CONFIRMATION [mailto:cggQozvOc@sutaffu.co.jp]Subject: Your Receipt and Itinerary
Thank you for choosing Delta. We encourage you to review this information before your trip.If you need to contact Delta or check on your flight information, go to delta.com/itineraries
Now, managing your travel plans just got easier. You can exchange, reissue and refund electronic tickets at delta.com/itineraries.
Take control and make changes to your itineraries at delta.com/itineraries.
Speed through the airport. Check-in online for your flight.
Check-inFlight InformationDELTA CONFIRMATION #: D0514B3TICKET #: 00920195845933Bkng Meals/ Seat/Day Date Flight Status Class City Time Other Cabin--- ----- --------------- ------ ----- ---------------- ------ ------ -------
Mon 11MAR DELTA 372 OK H LV NYC-KENNEDY 820P F 19CAR SAN FRANCISCO 8211P COACHFri 15MAR DELTA 1721 OK H LV LOS ANGELES 1145P V 29AAR NYC-KENNEDY 812A# COACH
Check your flight information online at delta.com/itineraries
The links in the e-mail message go to the two malicious websites below:
Both websites contain the malicious BlackHole v2.0 exploit kit which is used to infect millions of computers around the world with malwares.
These websites are hosted in the Russian Federation.
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
0