New spam/scam – american airlines ticket receipt in zip file

Topic

New Reply

I have not seen this one before, a mail purporting to be an e-ticket receipt from American Airlines for a flight on AA984 arriving New York JFK. As I had made no flight plans of any description, and had not flown AA for over a decade, I had little difficulty smelling a malware rat.

Notification,
FLIGHT NUMBER AA984
ELECTRONIC 181598999
DATE & TIME / DECEMBER 17, 2011, 11:53 PM
ARRIVING / NEW YORK JFK
TOTAL PRICE / 411.12 USD

Your bought ticket is attached to the letter as a scan document.
To use your ticket you should print it.

Thank you for your attention.
American Airlines.

Anyway, AA984 does not fly to JFK, a quick check of AA’s website shows this flight number to be a flight from Montevideo to Miami, which might be some indication of the origin of the scam.

Dell E5570 Latitude, Intel Core i5 6440@2.60 GHz, 8.00 GB - Win 10 Pro

Reply | Quote

Replies

We got one of those at work a few days ago. Just another for the bin!

BATcher

Plethora means a lot to me.

Reply | Quote

There are loads of similar ones. One that pops up frequently pretends to be from USPS. The important thing is never to open an attachment from a message you were not expecting.

Reply | Quote

I got one yesterday saying that Canada Post had a package for me that couldn’t be delivered and to click on the .zip file to get details on how to pick it up. Funny…I don’t remember giving them my email address… After Googling the filename, it is the same one that was going around Australia some time ago.

Reply | Quote

The AA scam is in Snopes…

BATcher

Plethora means a lot to me.

Reply | Quote

Snopes is awesome. I haven’t flow AA in many years, and don’t intend to if I can avoid it. If I got one of these I wouldn’t even read the email let alone open the attachment.

Reply | Quote

I received a fraudulent American Airlines email at 6:30 pm 12/14/11 advising a printable ticket to Phoenix attached for a 12/8/11 flight, and advising a charge to me of 312.12 USD. I haven’t flown in 15 years and have no reason whatsoever to go to Phoenix. I didn’t open the attachment; I know better. I googled “received email receipt attached ticket did not order american airlines” and found there was a scam out there. I read American’s notice about the malware scheme, which speculated the perps had compromised their database and were targeting it rewards program members. I knew I had never enrolled in their program and would not knowingly have shared personal info with American in many, many years, if ever. The extent of my contact with the airline had been to call for information on a flight’s arrival or departure schedule. I called the airline tonight to make sure they did not have me in their membership database and to let them know that the scam might not then necessarily be tied to a compromise of that database. The representatative said they were becoming aware of this.

After I got off the phone I thought of one possible connection. Last summer I downloaded the American Airlines app for my Android phone and used it for a week when I had to make a couple of trips to and from the airport to pick up or drop off visiting family members. After that I deleted the app. It’s likely the app maker would have had access to my name and cell number and probabaly my email. Anybody else targeted for one of these emails happen to have downloaded an AA app to an Android, or to an iPhone/iPad?

Reply | Quote

Unfortunately a lot of people fly and would think nothing of opening an attachment like that….

Reply | Quote

I just got one also, see below

TICKET / 1 169 1271335420 1
SEAT / 28E/ZONE 2
DATE / TIME 26 JUNE, 2012, 10:25 PM
ARRIVING / Montgomery
FORM OF PAYMENT / CC
TOTAL PRICE / 146.46 USD
REF / EF6100 ST / OK
BAG / 6PC

Please find your ticket attached.
To use your ticket you should print it.

Thank you
American Airlines.

Reply | Quote

I received an email with an eticket. I deleted it. It had the same essential message as the other two. Apparently it’s a big scam going on now.

Reply | Quote

Boy, they must really be pumping this one out because I just got it.

My flight is tomorrow…

Reply | Quote