Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

Fake and Malicious Delta Confirmation Receipt and Itinerary

The Delta confirmation receipt and itinerary e-mail message below is a fake and is malicious. This e-mail was sent by hackers or scammers in an attempt to trick their victims into clicking on the links in it. The links will take you to malicious websites that will infect your computer with malicious programs using the BlackHole Exploit kit. Do not click on or go to any of the links in this e-mail message.

Advertisements

A Copy the Malicious Email

From: DELTA CONFIRMATION [mailto:cggQozvOc@sutaffu.co.jp]
Subject: Your Receipt and Itinerary

Thank you for choosing Delta. We encourage you to review this information before your trip.
If you need to contact Delta or check on your flight information, go to delta.com/itineraries

Now, managing your travel plans just got easier. You can exchange, reissue and refund electronic tickets at delta.com/itineraries.

Take control and make changes to your itineraries at delta.com/itineraries.

Speed through the airport. Check-in online for your flight.

Check-in
Flight Information
DELTA CONFIRMATION #: D0514B3
TICKET #: 00920195845933
Bkng Meals/ Seat/
Day Date Flight Status Class City Time Other Cabin
--- ----- --------------- ------ ----- ---------------- ------ ------ -------

Mon 11MAR DELTA 372 OK H LV NYC-KENNEDY 820P F 19C
AR SAN FRANCISCO 8211P COACH
Fri 15MAR DELTA 1721 OK H LV LOS ANGELES 1145P V 29A
AR NYC-KENNEDY 812A# COACH

Check your flight information online at delta.com/itineraries

The links in the e-mail message go to the two malicious websites below:

Both websites contain the malicious BlackHole v2.0 exploit kit which is used to infect millions of computers around the world with malwares.

These websites are hosted in the Russian Federation.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (0)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)