[MRTrauffer]

I just received an email from the following address:

[email protected]

with the subject line: Your Apple Billing July 31, 2008

The body of the message looked pretty authentic:

http://www.grabup.com/uploads/b3fe2f...6502a1d8b1.png

Clicking on the "Clicking here" links to the following url: http://emiconsulting.au.com/store.apple.com/us/

A couple of red flags went up:
1. I've made no purchases from the Online store recently,
2. My MobileMe account doesn't renew for another 2 months,
3, The email was sent to an alias, not my main account,
4. While the webpage looks authentic, there is no left margin.

I've already called Apple and they're looking into blocking that address, but I just thought I'd pass the word.

[- - e r i k - -]

The language is very un-Apple. Fonts are also all wrong. The only authentic stuff is the images they've grabbed from the website/other mail.

[- - e r i k - -]

Also you mean:

http://emiconsulting.com.au/store.apple.com/us/

not .au.com (nonsensical)

[- - e r i k - -]

Things must not be going so well for http://emiconsulting.com.au/ if they are resorting to phishing scams

[MRTrauffer]

Originally Posted by - - e r i k - - 

Also you mean:

http://emiconsulting.com.au/store.apple.com/us/

not .au.com (nonsensical)

Good catch. Thanks.

[- - e r i k - -]

Some email addresses you can use to report suspicious mail are:

Anti-Phishing Working Group - [email protected]
The FTC - [email protected]
Apple - [email protected]

[mduell]

Maybe this will motivate Apple to add anti-phishing to Safari?

[analogika]

I like the "31th".

[Maflynn]

I get those emails all of the time, some are also saying my bank information is incorrect, click on the link and fill in them missing data. Apple really does need to add anti-phishing to Safari

[ghporter]

Active email address = phishing target. Some phishers are pretty smart about it, and very creative. I've seen phishing emails where the links LOOKED LEGITIMATE. But instead of say "www.apple.com' they'd go to "www.applé.com" or use some other, easy to miss change in the URL. Nasty people there. I generally pass on such emails to the agency/company that the phishers want me to think it really came from. I stopped doing that with banks though-too darn many of them to bother with. Spam filters catch most of these anyway.

[legacyb4]

One word:

www.opendns.com

[BRussell]

Oh mobilme, how you've grown up in so short a time.

[ctt1wbw]

Or you can do like I do often, I just reply to these emails with about 5 paragraphs written about what I will do to them with a pair of pliers and a blowtorch. Also to their dogs, cats, in laws, mothers, lawn mowers, et al. I never get these emails again.