EXCLUSIVE: Beware the Latest Delta Air Lines Phishing Attack Attempt By HEZI ARIS

eHezi Technology 16 Comments

PHISHINGYONKERS, NY — January 23, 2014 — A phishing scam mimics Delta Air Lines. The effort seems so well designed,  that it may snare more than a few victims.

Should you be lulled into thinking the links are legitimate, your computer system is coaxed into releasing your private information to the "bad guys", whether your using a PC / Apple. the rest of the addresses go to the bad guys. In addition, the email contains no obvious typos. Overall, this phishing attempt is well done.

In many similar cases, spelling errors may tip off the "victim", yet this message does not create such suspicion. Here is the email message I received today, yet Delata Airlines has yet to acknolwedge the phishing expedition that their toll-free number corroborates is a potentially harmful hoax to steal people's identities.

EVERYTHING BELOW IS USED IN A FRAUDULENT ATTEMPT TO STEAL YOUR IDENTITY. DO NOT CLINK ONTO THE HYPERLINKS. YOU ARE WARNED NOT TO ATTEMPT TO LINK TO THE WEBSITES LISTED.

Your credit card has been successfully processed.

FLIGHT NUMBER DT7803832015
ELECTRONIC 3763996351
DATE & TIME / JAN 26, 2014, 05:38 AM
ARRIVING / Washington
TOTAL PRICE / 479.18 USD

Please download and print your ticket from the following URL
https://www.delta.com/flifo/servlet/DeltaDLTicket?airline_code=DL&flight_number=DT7803832015&order_date=01/26/2014&request=main

For more information regarding your order, contact us by visiting : 
https://www.delta.com/content/www/en_US/support/talk-to-us.html

Thank you
Delta Airlines.

eHeziEXCLUSIVE: Beware the Latest Delta Air Lines Phishing Attack Attempt By HEZI ARIS

Comments 16

  1. I have been receiving these scam emails almost every day, sometimes two or three per day! Although it is very annoying to have to delete the attachment before deleting the message itself, it has become almost almost automatic due to the sheer volume of them.

    One thing that has really caught my eye with these, in addition to the telltale sign that the email does not address me by name, is that the majority of originating email addresses ends in “…repair.com”, otherwise they always end in the letters “air”.com. While I don’t think this is any sort of clue to the perpetrators, I do find it very interesting. For example, two I received yesterday are from “traneairconditioningrepair.com” and “dallastransmissionrepair”, and today’s is from “banyanair.com” (which turns out to be one of the exceptions to ending in “repair”. All of the examples in this comment section follow this observation, with only one that deviates from “repair”.

    Anyway, there’s no point in putting a copy in my reply, because they are identical to the ones already here. Stay safe and don’t give these crooks the info they crave.

  2. Here is the email I received yesterday. Spread the word that this is a scam!! Do we need to contact DELTA?

    Order Notification,

    TICKET NUMBER / ET-30337644
    SEAT / 33A/ZONE 3
    DATE / TIME 24 OCTOBER, 2014, 08:55 PM
    ARRIVING / Tacoma
    FORM OF PAYMENT / CC
    TOTAL PRICE / 268.30 USD
    REF / EK.8595 ST / OK
    BAG / 1PC

    Your ticket is attached.
    You can print your ticket.

    Thank you for using our airline company services.
    Delta Air Lines.

  3. SCAM ALERT
    Order #ID00713196 is processed

    Delta Air Lines to youshow details

    ET-36265926.zip (100 KB)
    Dear Client,

    TICKET / ET-23160641
    SEAT / 30E/ZONE 3
    DATE / TIME 7 OCTOBER, 2014, 11:35 PM
    ARRIVING / Pittsburgh
    FORM OF PAYMENT / CC
    TOTAL PRICE / 226.63 USD
    REF / KE.7245 ST / OK
    BAG / 2PC

    Please find your ticket attached.
    To use your ticket you should print it.

    Thank you
    Delta Air Lines.

    1. I just got the same one!

      from Delta Air Lines
      Subject: Your ticket #NR00125877

      Notification,

      E-TICKET / ET-30933497
      SEAT / 34F/ZONE 1
      DATE / TIME 19 OCTOBER, 2014, 09:45 AM
      ARRIVING / Moreno Valley
      FORM OF PAYMENT / XXXXXX
      TOTAL PRICE / 235.83 USD
      REF / EF.4494 ST / OK
      BAG / 2PC

      Your bought ticket is attached.
      To use your ticket you should print it.

      Thank you for using our airline company services.
      Delta Air Lines.

  4. Received today:
    E-TICKET NUMBER / ET-72946200
    SEAT / 32E/ZONE 1
    DATE / TIME 20 OCTOBER, 2014, 09:25 PM
    ARRIVING / Worcester
    FORM OF PAYMENT / XXXXXX
    TOTAL PRICE / 236.63 USD
    REF / LE.9156 ST / OK
    BAG / 1PC

  5. From: “Delta Air Lines” Add to Contacts | Invite Sender | Block SenderFull Header
    To: XXXXXX
    Sent: Tue, Sep 30, 2014 10:16 AM
    ET-55509103.txt (1KB)

    Notification,

    ELECTRONIC TICKET NUMBER / ET-84440615
    SEAT / 19F/ZONE 1
    DATE / TIME 23 OCTOBER, 2014, 11:15 PM
    ARRIVING / Stockton
    FORM OF PAYMENT / XXXXXX
    TOTAL PRICE / 247.18 USD
    REF / KE.0075 ST / OK
    BAG / 5PC

    Your ticket is attached.
    To use your ticket you should print it.

    Thank you for using our airline company services.
    Delta Air Lines.

    ——————————————————-
    FULL HEADER

    Return-Path:
    Received: from mx01.dca.untd.com (mx01.dca.untd.com [10.171.44.31])
    by maildeliver04.dca.untd.com with SMTP id AABLCXQ3QAHGLC22
    for XXXXXXXXXX (sender );
    Tue, 30 Sep 2014 07:16:14 -0700 (PDT)
    Authentication-Results: mx01.dca.untd.com; DKIM=NONE
    Received-SPF: None
    Received: from phoenixdentrepair.com
    (70-88-146-201-dan-jamison-md.hfc.comcastbusiness.net [70.88.146.201])
    by mx01.dca.untd.com with SMTP id AABLCXQ3PA5EKG8S
    for XXXXXXXXX (sender );
    Tue, 30 Sep 2014 07:16:13 -0700 (PDT)
    Message-ID:
    From: “Delta Air Lines”
    To: XXXXXXXXXXXXXXX
    Subject: Download your ticket
    Date: Tue, 30 Sep 2014 10:16:13 -0400
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary=”—-=_NextPart_000_0023_01CFDC97.905A1970″
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: XimianEvolution1.4.6
    X-MimeOLE: Produced By XimianEvolution1.4.6
    X-UNTD-BodySize: 107147
    X-UNTD-SPF: None
    X-UNTD-DKIM: NONE
    X-UNTD-SIGN-INFO: 53e564e03df984f010c984f0b09590e0a1a9b08d00a0f000f100a9
    X-ContentStamp: 5:2:611443811
    X-UNTD-Peer-Info: 70.88.146.201|70-88-146-201-dan-jamison-md.hfc.comcastbusiness.net|phoen
    ixdentrepair.com|supprefnum@phoenixdentrepair.com
    X-UNTD-UBE:-1

  6. What’s odd is that we ARE flying on the date indicated in the email, but on a different carrier and to a different city.

    From: Delta Air Lines (onlinesupport@bostondentrepair.com)
    Sent: Tue 9/30/14 1:07 PM
    To: XXXXXXX

    Dear Client,

    ELECTRONIC TICKET NUMBER / ET-54581048
    SEAT / 37F/ZONE 3
    DATE / TIME 24 OCTOBER, 2014, 12:45 AM
    ARRIVING / Toledo
    FORM OF PAYMENT / CC
    TOTAL PRICE / 223.61 USD
    REF / EF.3849 ST / OK
    BAG / 6PC

    Please find your ticket attached.
    You can print your ticket.

    Thank you for your attention.
    Delta Air Lines.

  7. I received this today. Return email address is “operate@katslair.com”

    Dear Customer,

    TICKET NUMBER / ET-18044402
    SEAT / 25A/ZONE 3
    DATE / TIME 20 OCTOBER, 2014, 09:15 AM
    ARRIVING / Buffalo
    FORM OF PAYMENT / CC
    TOTAL PRICE / 223.66 USD
    REF / LE.4630 ST / OK
    BAG / 4PC

    Your electronic ticket is attached to the letter as a scan document.
    To use your ticket you should print it.

    Thank you
    Delta Air Lines.

  8. Dear Client,

    ELECTRONIC TICKET NUMBER / ET-71517299
    SEAT / 57E/ZONE 2
    DATE / TIME 19 OCTOBER, 2014, 09:15 AM
    ARRIVING / Pittsburgh
    FORM OF PAYMENT / XXXXXX
    TOTAL PRICE / 278.36 USD
    REF / EF.4908 ST / OK
    BAG / 7PC

    Your electronic ticket is attached to the letter as a scan document.
    You can print your ticket.

    Thank you for using our airline company services.
    Delta Air Lines.

  9. Hello,

    TICKET NUMBER / ET-74793452
    SEAT / 79E/ZONE 3
    DATE / TIME 20 OCTOBER, 2014, 10:45 PM
    ARRIVING / Minneapolis
    FORM OF PAYMENT / XXXXXX
    TOTAL PRICE / 278.03 USD
    REF / EF.3877 ST / OK
    BAG / 3PC

    Your ticket is attached.
    You can print your ticket.

    Thank you for using our airline company services.
    Delta Air Lines.

  10. Subject: Please download your ticket #00492380

    Order Notification,

    TICKET / ET-95486165
    SEAT / 71A/ZONE 3
    DATE / TIME 6 OCTOBER, 2014, 10:55 PM
    ARRIVING / Indianapolis
    FORM OF PAYMENT / CC
    TOTAL PRICE / 215.21 USD
    REF / KE.4925 ST / OK
    BAG / 7PC

    Please find your ticket attached.
    To use your ticket you should print it.

    Thank you
    Delta Air Lines.

  11. Sent from: Delta Air (noreply@satterfieldsautorepair.com)

    Notification,

    ELECTRONIC TICKET / ET-59172934
    SEAT / 64A/ZONE 2
    DATE / TIME 4 OCTOBER, 2014, 09:55 PM
    ARRIVING / Fort Worth
    FORM OF PAYMENT / CC
    TOTAL PRICE / 269.38 USD
    REF / KE.4643 ST / OK
    BAG / 7PC

    Your electronic ticket is attached to the letter as a scan document.
    To use your ticket you should print it.

    Thank you for your attention.
    Delta Air Lines.

  12. Dear Client,

    TICKET NUMBER / ET-92833555
    SEAT / 27F/ZONE 3
    DATE / TIME 29 OCTOBER, 2014, 11:15 AM
    ARRIVING / Augusta
    FORM OF PAYMENT / CC
    TOTAL PRICE / 215.67 USD
    REF / LE.9282 ST / OK
    BAG / 6PC

    Your ticket is attached.
    You can print your ticket.

    Thank you
    Delta Air Lines.

    WHAT A BUNCH OF B.S.!

    ATT: WORLD: REPENT AND BELIEVE THAT THE GOD OF EVERYTHING CAME IN CHRIST TO SAVE THOSE OF US WHO CHOOSE LIFE! THE KINGDOM OF HEAVEN IS AT HAND! STOP LISTENING TO THE LIES OF THE FALLEN WORLD! ASK AND YOU WILL RECEIVE! THE TRUTH SHALL MAKE YOU FREE!

  13. I received the following in an email with a zip file attached named ET 79380379. The return address is Delta Air
    I have not made any plans to fly to Columbus!

    Order Notification,

    ELECTRONIC TICKET / ET-94420408
    SEAT / 50A/ZONE 2
    DATE / TIME 5 OCTOBER, 2014, 11:45 AM
    ARRIVING / Columbus
    FORM OF PAYMENT / XXXXXX
    TOTAL PRICE / 270.85 USD
    REF / EF.8028 ST / OK
    BAG / 2PC

    Your ticket is attached.
    To use your ticket you should print it.

    Thank you for your attention.
    Delta Air Lines.

    1. From: time@thepapertieaffair.com
      To: XXXXXXXX
      Subject: Order #NR00417084 is processed
      Date: Mon, 29 Sep 2014 16:15:40 -0400

      Notification,

      TICKET / ET-81176931
      SEAT / 18F/ZONE 1
      DATE / TIME 27 OCTOBER, 2014, 11:55 PM
      ARRIVING / Lexington
      FORM OF PAYMENT / XXXXXX
      TOTAL PRICE / 290.15 USD
      REF / EF.2005 ST / OK
      BAG / 5PC

      Your electronic ticket is attached to the letter as a scan document.
      To use your ticket you should print it.

      Thank you
      Delta Air Lines.

Leave a Reply

This comment will be displayed anonymously. Your name and email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.