Colnago への道のり(2) - フィッシング詐欺

先日「Colnago への道のり(1) - まさかの急展開」でも書きましたが、いきなりクレジットカード決済のトラブルに見舞われた Colnago への道のり。翌日何とか事なきを得たのですが、これで終わりではありませんでした。
その4日後、"IMPORTANT BELLATISPORT - PROBLEM WITH YOUR ORDER" という件名のメールが届きました。きちんとカード会社の決済は通ったはずなのに今度は一体何が問題だというのだ。実はこれがフィッシング詐欺だったのです。以下にそのメールの全文(金額部分は■にしています)を掲載します。

Dear customer

You have made on our website www.bellatisport.com a command of an amount of ■■■■.00. Unfortunately, the payment of your completed order made the 2011-12-03 at 06:41:44 had been cancelled by our online payment terminal.

Your order is pending payment, and delivery was not accepted by our customer service. To validate the shipping and delivery of your order, it is necessary to proceed with the settlement of the sum of ■■■■.00 by WESTERN UNION TRANSFER at the service of receiving payments of our society.

Complete information below:

Last Name: Agbo
First Name: Aurélien
Address: 12 Hallebeverly Street
Postal Code: 00229
City: Cotonou
Country: BENIN

We remind you that following security measures, and to enable us to power delivery in the best time of your order, your order payment must be done later than this 08-12-2011 before 12 hours. Payment by Western Union transfer can be done by visiting in Agency of western union close to you (go to the agency with the sum in cash).

NB: Once the Western Union transfer carried out, send us your western union transfer information by mail to the address bellatisport@netcmail.com stating your order number.

  • Name and surname:
  • Full address:
  • City:
  • Postal code:
  • Countries:
  • MTCN number
  • Question Test
  • Response Test

The Finance Bellati Sport Service
Command officer: James Lescott
Tel: 002 299 754 6346
www.bellatisport.com

要するにあなたの注文はキャンセルされて、支払が保留状態になっている。ちゃんと発送するには Western Union Transfer (送金代行サービス) を使って代金を支払い、住所氏名とMTCN number などの情報を 2011年12月8日までに bellatisport@netcmail.com 宛に送れという内容。
確かに1日でも早く発送して欲しいので、そこをうまくついているかも知れないけど、手口があまりにも幼稚過ぎやしないかい?そもそも送信者の SMTPアドレスが bellatisport@netcmail.com となっており、ドメインが bellatisport.com じゃないし、宛先の人の国が BENIN って何それ?でしょ。
問題は、■■■■ の部分の金額がディスカウント前の金額とぴったり一致していることと、Bellati Sport で買い物をしたこと、そして私のメールアドレスが第3者にリークしているってこと。当然、こんな詐欺にひっかかって送金するほどアホではない!
フィッシング詐欺はもちろんだけど、自分のオーダー情報がリークしていることに腹が立ち、bellatisport に一筆。その際のやり取りの一部がこちら。*1

From: info bellatisport
Sent: Friday, December 09, 2011 4:00 PM
To: 'Blackcomb'
Subject: RE: Got phishing email from fake "The Finance Bellati Sport Service"

Good day Mr. Blackcomb,

I am really sorry for this embarrassing situation. Iis the first time it
happens and I hope it will be the last.

Yours sincerely,

Andrea Bellati

Andrea Bellati Sport
Via G. Lanz 1
CH-6850 Mendrisio
Switzerland

Phone: +41-91-646 11 83
Mobile: +41-79-230 18 40
Skype: abellati
www.bellatisport.com
www.tracemyworld.com

          • Original Message-----

From: Blackcomb
Sent: Friday, December 09, 2011 12:52 AM
To: info@bellatisport.com
Subject: Got phishing email from fake "The Finance Bellati Sport Service"

Today, I received attached email that says "PROBLEM YOUR ORDER". The email
sent from bellatisport@netcmail.com with the signature at bottom of the
email says "The Finance Bellati Sport Service".
I thought that's a phising, then confirmed with your shop contact that was
fake. Of course, I will just ignore this phising.

But my concern is - my email address and amount (■■■■.00) are leaked to
someone. It was first time for me to shop at Bellatisport, so it's not a
good experience.
I hope you to investigate why those information was leaked from my shopping
at Bellatisport, and make sure to not happen in the future.

Thank you,
Blackcomb

          • Original Message-----

From: shop
Sent: Friday, December 09, 2011 1:28 AM
To: 'Blackcomb'
Subject: RE: Bellati Sport order confirmation

Good day Mr. Blackcomb,

Bellatisport is experiencing Fake Orders Cancellation coming from a fake
bellatisport website located in Benin.
Do not follow any instruction to pay again with Western Union.
Every order placed at Bellatisport has been processed correctly and there is
no risk with customer credit card data.
Should you receive suspect email again, please contact
info(at)bellatisport.com

Yours sincerely,

Andrea Bellati

Andrea Bellati Sport
Via G. Lanz 1
CH-6850 Mendrisio
Switzerland

Phone: +41-91-646 11 83
Mobile: +41-79-230 18 40
Skype: abellati
www.bellatisport.com
www.tracemyworld.com

          • Original Message-----

From: Blackcomb
Sent: Thursday, December 08, 2011 3:42 PM
To: shop
Subject: Re: Bellati Sport order confirmation

Hello,

Today, I received attached email that says "PROBLEM YOUR ORDER". The email
sent from bellatisport@netcmail.com with the signature at bottom of the
email says "The Finance Bellati Sport Service".
It sounds like phishing. Are you aware of this?

Thanks,
Blackcomb

そしてその2日後に、このフィッシング詐欺に対する警告メールが届きました。これは恐らく全カスタマー向けに送ったと思われる。それがこちら。

Dear Customer,


Bellatisport is experiencing Fake Orders Cancellation coming from a fake bellatisport website located in Benin (Africa).

Do not follow any instruction to pay again with Western Union or make a bank transfer on bank account located in France or in other Country.


Every order placed at Bellatisport has been processed correctly and there is no risk with customer credit card data.

Should you receive suspect email again, please contact info(at)bellatisport.com.


Your sincerely,

Andrea Bellati

そして同日 Web サイトのトップページにもこのフィッシング詐欺に注意するようにという文面が掲載されました。
結局私は何の被害も被らずに済んだから良かったものの、ここまで情報がリークしているかと思うと少々不安です。もし万が一こういったフィッシングメールを受け取った方がいたら、決して Western Union Transfer を利用しないように気をつけてください。ここで共有した情報が少しでも被害を抑える助けになれば幸いです。
第2回は Colnago とはまったく関係ないお話でしたね。失礼しました。(^^;;
つづく...

*1:私の名前の箇所は Blackcomb に置き換えていますがそれ以外は原文のまま