Topic: BEWARE of this new SCAM ...

[Fedman NCC-3758]

 I just got an email to my aol account.  I instantly smelled a rat.  Below is how it will appear :

Hello

 FLIGHT NUMBER AA534
 ELECTRONIC 598227040
 DATE & TIME / JANUARY 17, 2012, 10:14 PM
 ARRIVING / Corpus Christi
 TOTAL PRICE / 195.22 USD

 Your bought ticket is attached to the letter as a scan document.
 To use your ticket you should print it.

 Thank you
 American Airlines.


A quick search reveals that flight AA534 does not fly to Corpus Christi ....... DUH !!   It comes with a link zip file.  Gee, i wonder if I should click that link ?



Then a jog around the web for some info .... lo and behold ...


New spam/scam - american airlines ticket receipt in zip file
 I have not seen this one before, a mail purporting to be an e-ticket receipt from American Airlines for a flight on AA984 arriving New York JFK. As I had made no flight plans of any description, and had not flown AA for over a decade, I had little difficulty smelling a malware rat.

 Notification,
 FLIGHT NUMBER AA984
 ELECTRONIC 181598999
 DATE & TIME / DECEMBER 17, 2011, 11:53 PM
 ARRIVING / NEW YORK JFK
 TOTAL PRICE / 411.12 USD

 Your bought ticket is attached to the letter as a scan document.
 To use your ticket you should print it.

 Thank you for your attention.
 American Airlines.

 Anyway, AA984 does not fly to JFK, a quick check of AA's website shows this flight number to be a flight from Montevideo to Miami, which might be some indication of the origin of the scam.


NOTE:
 If you received an email like the example below asking you to perform security-related changes to your account or attempting to collect your user name, password, email address or other personal information, you have received a fraudulent email. American Airlines will never send executable files as attachments, nor ask our customers for this type of personal information in email communications.

DO NOT click on any links, open any attachments, call phone numbers listed, or follow any instructions in these fraudulent emails including opening any type of attachments. Instead, delete all emails and attachments.

 If you have clicked on any of the links in this fraudulent email, please take these steps:
Login to AA.com by entering www.aa.com. manually
Verify your mileage balance, email address, and physical address
Immediately change your password to help protect your account information If you see any discrepancies over the next day or two, please contact our AAdvantage Services Department at 1-800-882-8880. In most cases, attempts to obtain personal information begins with an unauthorized change of the victim's password, preventing the true account owner from logging in.

 We deeply regret this inconvenience to you as an American Airlines customer. Your privacy and security is extremely important to us.
EXAMPLE EMAIL -

From: sales1@xxxxxxxxxx.com [mailto:sales1@xxxxxxxxxxxxx.com]
 Sent: Thursday, November 17, 2011 5:17 PM
 To: AMessina
 Subject: Re: Your Flight Order N590-5507130

 Dear Customer,

 FLIGHT ELECTRONIC NUMBER 8532856
 DATE & TIME / NOVEMBER 28, 2011, 11:17 PM
 ARRIVING: NEW YORK JFK
 TOTAL PRICE : 278.02 USD

 Please download and print out your ticket here:


 Marie MATTHEWS,
 American Airlines




Have a nice day.

Fed out