• Re: Suspicious "invoice" email?

    From Marco Moock@21:1/5 to All on Fri May 17 21:40:01 2024
    Am 17.05.2024 um 15:28:35 Uhr schrieb PMA:

    I received the following today from (Jerry Henley at) Ella White <[email protected]>.

    That is spam.

    I suspect fraud here, so have not opened the invoice he/she attached.

    Done well.

    Can you possibly tell me whether the message is legitimate?

    No. There is also no logical reason to send an invoice to a public
    mailing list. If I receive it that way, I know that it is definitely
    not legitimate mail.

    --
    Gruß
    Marco

    Send unsolicited bulk mail to [email protected]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From [email protected]@21:1/5 to PMA on Fri May 17 21:50:01 2024
    On 5/17/24 15:28, PMA wrote:
    Dear List,

    I received the following today from (Jerry Henley at) Ella White <[email protected]>.

    I suspect fraud here, so have not opened the invoice he/she attached.

    Can you possibly tell me whether the message is legitimate?
    Greetings! customer,

    It came through this list, so no.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From PMA@21:1/5 to All on Fri May 17 21:40:02 2024
    This is a multi-part message in MIME format.
    Dear List,

    I received the following today from (Jerry Henley at) Ella White <[email protected]>.

    I suspect fraud here, so have not opened the invoice he/she attached.

    Can you possibly tell me whether the message is legitimate?

    Thanks for your time!

    Peter Armstrong

    Greetings! customer,

    I hope you're doing well.

    Thank you for your valued business. Attached is invoice statement #265753517 as requested.

    Invoice Amount: $697.56
    Due Date: 2024-05-17

    For any inquiries or additional assistance, feel free to reach out. We're here to help.

    Appreciatively
    Jerry Henley
    888-632-2898

    <html>
    <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body text="#000000" bgcolor="#77767b">
    <p>Dear List,</p>
    <p>I received the following today from (Jerry Henley at) Ella White
    <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]">&lt;[email protected]&gt;</a>.<br>
    </p>
    <p>I suspect fraud here, so have not opened the invoice he/she
    attached.<br>
    </p>
    <p>Can you possibly tell me whether the message is legitimate?</p>
    <p>Thanks for your time!</p>
    <p>Peter Armstrong</p>
    <blockquote type="cite">
    <pre class="moz-quote-pre" wrap="">Greetings! customer,

    I hope you're doing well.

    Thank you for your valued business. Attached is invoice statement #265753517 as requested.

    Invoice Amount: $697.56
    Due Date: 2024-05-17

    For any inquiries or additional assistance, feel free to reach out. We're here to help.

    Appreciatively
    Jerry Henley
    888-632-2898</pre>
    </blockquote>
    <br>
    </body>
    </html>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Karen Lewellen@21:1/5 to PMA on Fri May 17 21:50:01 2024
    ahem,
    I got it as well.
    Having never heard of the company, i simply removed it..although?
    Given Google's decision to remove basic html, which gave users the ability
    to flag such addresses, that someone still sent spam says allot about
    google speaking personally.
    Karen



    On Fri, 17 May 2024, PMA wrote:

    Dear List,

    I received the following today from (Jerry Henley at) Ella White <[email protected]>.

    I suspect fraud here, so have not opened the invoice he/she attached.

    Can you possibly tell me whether the message is legitimate?

    Thanks for your time!

    Peter Armstrong

    Greetings! customer,

    I hope you're doing well.

    Thank you for your valued business. Attached is invoice statement
    #265753517 as requested.

    Invoice Amount: $697.56
    Due Date: 2024-05-17

    For any inquiries or additional assistance, feel free to reach out. We're >> here to help.

    Appreciatively
    Jerry Henley
    888-632-2898


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Michael =?utf-8?B?S2rDtnJsaW5n?=@21:1/5 to All on Fri May 17 22:00:01 2024
    On 17 May 2024 15:28 -0400, from [email protected] (PMA):
    I received the following today from (Jerry Henley at) Ella White <[email protected]>.

    I suspect fraud here, so have not opened the invoice he/she attached.

    Can you possibly tell me whether the message is legitimate?

    The email came through a public mailing list, so as others have
    already said, there's zero reason to believe that it is a legitimate
    invoice intended for you (for any value of "you").

    Therefore: Just delete the email.

    Also note that the "from" name and email address is almost certainly
    faked in some way shape or form. It may or may not actually belong to
    a real person, but even if it does, that person is almost certainly a
    victim themselves. DO NOT direct any complaints to that email address;
    more generally, do not direct complaints to the envelope-from email
    address of _any_ spam.

    Spam occasionally getting through here is an unfortunate side-effect
    of the debian-user mailing list being set up to allow people who
    aren't already subscribed to it to post to it.

    --
    Michael Kjörling 🔗 https://michael.kjorling.se “Remember when, on the Internet, nobody cared that you were a dog?”

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alain D D Williams@21:1/5 to PMA on Sat May 18 01:20:01 2024
    On Fri, May 17, 2024 at 03:28:35PM -0400, PMA wrote:

    I received the following today from (Jerry Henley at) Ella White <[email protected]>.

    I suspect fraud here, so have not opened the invoice he/she attached.

    Can you possibly tell me whether the message is legitimate?

    I did not spend much time on it. Some, ill informed or naive people would have just paid it, or it could have been an attempt to infect a (MS Windows) PC, or it could have been an attempt to get bank a/c details.

    Anyway: things like that I forward to the address below and they are looked at by people in GCHQ or similar -- you can help them to combat these reprobates by forwarding suspicious emails:

    [email protected]

    --
    Alain Williams
    Linux/GNU Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.
    +44 (0) 787 668 0256 https://www.phcomp.co.uk/
    Parliament Hill Computers. Registration Information: https://www.phcomp.co.uk/Contact.html
    #include <std_disclaimer.h>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)