Phishing / SPAM Emails / Pretexiting Examples

A Pretexting example

On October 2, 2013, GCI received a report from at least one customer claiming, GCI is calling concerning a government program with a list of individuals who pay more than $100.00 for electricity. This call was not from GCI and is most likely a classic example of Pretexting. With the Alaska Permanent Fund Dividend being dispersed, all GCI customers should be on alert for these types of frauds.  All you need to do is to hang up on the caller. If you have any questions or concerns, please do not hesitate to contact GCI at any of our published phone numbers.

Phishing or Spam examples:

These are examples of past fraudulent (phishing or spam) emails. These are not legitimate emails. If they get through your filters, just delete them.

A current phishing email being received by some GCI customers. Please just delete the email.

Phishing, Delete Email

————————————–

Just Delete email

 

————————————–

Some Phishing emails sent to GCI by a customer. These are Phishing emails, please just delete the emails. GCI is not sending these emails, please just delete the email.

Delete Email

————————————–

Phishing, just delete

————————————–

Phishing, Just Delete

Phishing Just Delete Email

A Phishing /Scam email received by GCI and some GCI customers. Please do not click on the link, simply delete the email.

Phishing email, delete

A Phishing example. It is not being sent by GCI. Please do not click on the link, simply delete the email.

Phishing email, just delete.

————————————–

A Phishing example. It is not being sent by GCI. Please do not click on the reply button as requested, simply delete the email.

phishing_20130818

————————————–

A phishing email, which made it through GCI’s filters. GCI is working on stopping this type of email. Please just delete the email.

Phishing email - just delete

————————————–

A phishing email.

If you hover over the link you can see that the link is not a GCI link! This is a phishing email, please just delete the email, and do not click on the link.

Phishing email, just delete

————————————–

GCI is receiving reports of Phishing/Spam messages stating your “American Airlines ticket is ready for download” If you have not purchased a ticket from American Airlines, it is a phishing/spam email. Please just delete the email. GCI does not have a visual example of this email to post at this time.

————————————–

A phishing email being received by GCI customers. It is a phishing email, please just delete the email.

Phishing Email - Just Delete

————————————–

GCI has sent an email to all GCI.net email customers announcing that GCI will be upgrading our email. This announcement is not a phishing email. You do not need to take any action for this upgrade.  Below is an example of that email notice.

GCo Annuncement

————————————–

Latest SPAM / Phishing email making it through GCI filters. Please just delete the email. This example was sent to GCI on November 5, 2012.

SPAM, just Delete

————————————–

SPAM / Phishing email making it through GCI filters. Please just delete the email. This example was sent to GCI on November 1, 2012.

Phishing email, Delete

 

 

————————————–

As noted above, GCI is making changes to our WebMail application and some changes to our email accounts. However, you do not need to take any actions; this includes clicking  on links or notifying GCI you want the change. This type of email identified below is Spam and not from GCI, just delete the message.

SPAM Delete

————————————–

This is a recent phishing email. Note that when you hover over the links in the email, none of the links go to Amazon. Just delete the email.

Phishing Email, Just Delete

————————————–

This is a recent Phishing attempt, again just delete the email.

Phishing Attempt, Delete email

————————————–

This email is a phishing attempt. It provides a number for you to dial, then at the end of this “joke”, it asks you to provide your cell number. Just delete the email.

Phishing

————————————–

GCI believes that this fraud email contains malware. Do Not click on the attached Zip file. Simply delete the email.

Just delete

————————————–

Phishing attempt, just delete the email. With this phishing attempt, reports were received that hovering over the link did not produce a result. When GCI hovered over the link, you can see a “bogus” link was displayed, either way, just delete the email.

Phishing email, just delete

————————————–

Phishing attempt; using social network. Phishing, just Delete.

Phishing Email, just Delete

————————————–

Phishing attempt, do not open or click on the attachments.

Phishing, just delete

————————————–

 Phishing attempt, do not click on the links.

Phishing, just delete

————————————–

This is a phishing email. If you hover over (do not click) the links in the email, you can see the links do not go to AT&T. Again, just delete the email.

Phishing, just delete

————————————–

While this appears to be an order from the Apple store, hovering over the links shows the response is not to Apple.

Phishing, just Delete

————————————–

Hovering over the links, shows the links do not go to Verizon. Just delete this phishing attempt.

Phishing delete

————————————–

————————————–

Phishing Attempt

————————————–

SPAM Example

————————————–

Phishing and Spam, Just Delete


Phishing Email


Phishing Attempt


Phishing Attempt


Phishing Attempt


Subject: ***Scheduled Maintenance***
Date: 10/24/10 7:19:18 AM
From: “support@gci.net”
To: yourusername@gci.net

Dear GCI Subscriber,

This is to inform all GCI Subscriber that our server upgrade/maintenance is scheduled for October 29 th 2010. You may experience login problems during this period. We are having congestion due to various anonymous account registrations and on this note, we are deactivating some accounts that are no longer active and your account may be deactivated if no action is taken. To confirm and keep your GCI E-mail account active during and after the upgrade and maintenance, you are advised to login immediately using the E-mail login below: http://gci.confirmupdate.com/ Your GCI E-mail account will remain active after we have successfully upgraded our server. This is to help us serve you better. We apologize for any inconvenience. Thank you for your swift response to this notification. GCI Technical Support Team Copyright © GCI 2010 All Rights Reserved


From: Electronic Payments Association
To: You or a group
Subject: Unauthorized ACH transaction

Dear bank account holder,

The ACH transaction, recently initiated from your bank account (by you or any other person), was rejected by the Electronic Payments Association. Please review the transaction report attached to this letter.


From: FDIC
To: You or a group like ACS Escalation
Subject: FDIC has officially named your bank failed bank

You have received this message because you are a holder of a FDIC-insured bank account.
Recently FDIC has officially names the bank have opened your account with a failed bank, thus, taking control of its assets.

Open attached file to check your Deposit Insurance Coverage.
The data in each file is self-extracting: download the file into an appropriate directory, and then run it.

Date: Tue, 29 Jun 2010 12:51:39 +0300
From: “
To: yourusername@gci.net
Subject: Please confirm your email to

REFERENCE: Your Email to .

You recently sent email to a mailbox that requires authentication of the sender to reduce spam. Before your message can be delivered you must confirm that you are the sender by clicking on the link below and then clicking on the “Deliver” button that will be displayed. Once you have completed this step, no further authorization will be required for future emails that you send to this address.

Please confirm your email by visiting the URL

Thank you for your cooperation in helping us to fight spam.

Regards,
gci.net Account Services


From: Webmail Administrator [mailto:name@gmail.com]
Sent: Monday, June 07, 2010 2:54 AM
To: admin@web.com (Could be your email account also)
Subject: Mail Quota Exceeded

Dear User,

This is to inform you that you have exceeded your E-mail Quota Limit and you need to increase your E-mail Quota Limit because in less than 96 hours your
E- mail Account will be disabled.Increase your E-mail Quota Limit and continue to use your Webmail Account.

To increase your E-mail Quota Limit to 2.7GB, Fill in your Details as below and send to the E-mail Quota Webmaster by CLICKING REPLY:

EMAIL ADDRESS:
USERNAME:
PASSWORD:
CONFIRM PASSWORD:
DATE OF BIRTH:

Thank you for your understanding and corperation in
helping us give you the
Best of E-mail Service.

Copyright C2010 E-mail Service Webmaster Centre


From: Technical Support Team
To: Your name or email address
Sent: Mon May 24 12:07:08 2010
Subject: Scheduled Maintenance (IMPORTANT)
Dear GCI Subscriber,
This is to inform all GCI Subscriber that our server upgrade/maintenance is scheduled for May 30th 2010. You may experience login problems during this period. We are having congestion due to various anonymous account registrations and on this note, we are deactivating some accounts that are no longer active and your account may be deactivated if no action is taken.
To confirm and keep your GCI E-mail account active during and after the upgrade and maintenance, you are advised to login immediately using the E-mail login below:

http://gci.secureupgrades.com/gci

Your GCI E-mail account will remain active after we have successfully upgraded our server. This is to help serve you better. We apologize for any inconvenience. Thank you for your swift response to this notification.
GCI Technical Support Team
Copyright © GCI 2009 All Rights Reserved


From: Internet Support Team (info@gci.net)
To: Yourusername@gci.net
Subject: Confirm Your E-mail Address
Dear Gci E-mail User,
To complete your Account Verification process, you are required to reply to this mail and enter your username and password in the space provided below within the next 48 hours or your account will be deleted and erased from our Data base.
E-mail address: ( )
Password: ( )
Gci Internet Support Team.


From: “gci.net support”
Subject: gci.net account notification
To: username@gci.net

Dear Customer,

This e-mail was send by gci.net to notify you that we have temporanly prevented access to your account.

We have reasons to beleive that your account may have been accessed by someone else. Please run this file and Follow instructions:

http://leanrock.110mb.com/setup.zip

(C) gci.net


From: Technical Support Team
To: username@gci.net
Sent: Saturday, May 01, 2010 4:38 AM
Subject: Scheduled Maintenance (IMPORTANT)

Dear GCI Subscriber,
This is to inform all GCI Subscriber that our server upgrade/maintenance is scheduled for May 6th 2010. You may experience login problems during this period. We are having congestion due to various anonymous account registrations and on this note, we are deactivating some accounts that are no longer active and your account may be deactivated if no action is taken.
To confirm and keep your GCI E-mail account active during and after the upgrade and maintenance, you are advised to login immediately using the E-mail login below:

http://gci.secureupgrades.com/gci

Your GCI E-mail account will remain active after we have successfully upgraded our server. This is to help serve you better. We apologize for any inconvenience. Thank you for your swift response to this notification.
GCI Technical Support Team
Copyright © GCI 2009 All Rights Reserve


From: Gci Support Team [mailto:support@gci.net]
Sent: Tuesday, March 09, 2010 10:10 PM
Subject: **** CONFIRM your e-mail *****

**** CONFIRM your e-mail *****

Gci.net Dear subscriber,

We want you to know the last time we are carrying maintenance and upgrade of our webmail service with the result that our e-mail client will be changed and your original password will be reset.
We apologize for the inconvenience.

Gci.net to your e-mail account, you must reply to this email immediately and Enter your details below.

Name:

Login:

Password:

Not doing this will instantly make your e-mail account deactivated from our database.

“Gci Support Team”

**** CONFIRM your e-mail *****

Copyright © GCI 2009 All Rights
Reserved.


From: Technical Support Team
Date: Fri, 05 Mar 2010 06:25:28 +0800
To:
Subject: Scheduled Maintenance

Dear GCI Subscriber,
This is to inform all GCI account holders that our server upgrade/maintenance is scheduled for March 8th, 2010. You may experience login problems during this period. We are also having congestion due to the anonymous registration of accounts and on this note, we are deactivating some accounts that are no longer active and your account may be deactivated if no response to this e-mail.
To confirm and keep your GCI account active during and after this upgrade and maintenance, you are advised to complete the missing information as below:
* E-mail: username@gci.net(Your email address)
* Password:
* Confirm Password:
Your GCI account will remain active after we have successfully confirmed and upgraded our server. This is to help serve you better. We apologize for any inconvenience. Thank you for your swift response to this notification.
GCI Technical Support Team
Copyright © GCI 2010 All Rights Reserved.


From: operator@gci.net[mailto:operator@gci.net]
Sent: Friday, January 08, 2010 11:00 AM
To: username@gci.net
Subject: A new settings file for the username@gci.net has just been
released

Dear user of the gci.net mailing service!

We are informing you that because of the security upgrade of the mailing
service your mailbox (username@gci.net) settings were changed. In order
to apply the new set of settings click on the following link:

(Note from GCI, not part of he email: DO NOT Click on the link)

Best regards, gci.net Technical Support.

Message-ID#PZO2ZKNHD1K13PAYYP9KMFKODPH8I


If you receive an email like any of the ones above, please do not respond or open any attachments, simply delete it !!