Phishing bait: Delta Air Lines ticket purchase confirmation e-mails.
Example: [Collected via e-mail, April 2012]
Dear Customer,
E-TICKET / 3 501 1267539366 3
SEAT / 38E/ZONE 2
DATE / TIME 19 April, 2012, 10:35 AM
ARRIVING / Moreno Valley
FORM OF PAYMENT / CC
TOTAL PRICE / 396.96 USD
REF / KE4618 ST / OK
BAG / 6PC
Your bought ticket is attached.
You can print your ticket.
Thank you for using our airline company services.
Delta Air Lines.
Variations: Some April 2012 versions in circulation purport to originate with
Origins: In April 2012, Internet users began receiving messages like the one reproduced above that purported to be confirmations of recently purchased tickets for flights on Delta Air Lines. Such messages included instructions for the recipients to follow a hyperlink or open an attachment containing what appeared to be a document in order to download and print their boarding passes. These messages were intended to lure recipients, concerned about receiving confirmations for airline ticket purchases they didn't remember making, into attempting to view the referenced ticket
Delta Air Lines has posted a phishing alert about this scheme on its site, advising that:
We have recently received reports from customers of fraudulent emails claiming to be from Delta Air Lines. As such, please be advised of the following: We recommend you change your SkyMiles account PIN immediately and monitor your account for any misuse. These emails were not sent by Delta Air Lines. You should not click on the link in the email or open any attachments. Instead, you should delete the email from your inbox. Please call us at 1-888-750-3284 if you have questions or need further information. These emails claim that you have purchased a Delta ticket, a credit card has been charged, an invoice or receipt is attached or that you may print your electronic ticket from an attachment. If you receive one of these emails, do not open the attachment as it may contain potentially dangerous viruses or harm your computer. Be assured that Delta did not send these emails, and our customers' credit cards have not been charged by Delta as a result of the emails. These emails did not originate from Delta, nor do we believe that any personal information that you provided us was used to generate these emails. We will continue to post updates on this page as additional information becomes available.
Last updated: 5 April 2012