Strange Email

[Ski]

I got a suspicious email the other day that is allegedly from Bud's Gun Shop.  The subject was "Offer from online store Budsgunshop!"  It's allegedly from Helena Otoole <pfeiferk@tmp-m.org>.  It has an attachment called Budsgunshop.doc which I suspect contains malware.  Here's the body of the message.  Anyone else get something similar?

 

Quote

We will thee for chance accurately closer tp his online armory Budsgunshop. 
And we produce you 100 usd. to take on astonishing productat www.budsgunshop.com make use of gift at this point.
Your special promo voucher is applied to the letter ,
Order today and obtain your merchandise delivered 
to the home for free!
Yours, Budsgunshop.

 

[GlockSpock]

Either a scam or malware attempt.

Likely either from Bud’s email server (hacked), or simply spoofed entirely.


Sent from my iPhone using Tapatalk

[GlockSpock]

I wouldn’t open the attachment, especially on a windows computer without proper antivirus software.


Sent from my iPhone using Tapatalk

[DWARREN123]

Notify Buds and see what they say.

Do "NOT" open the attachment!

Edited February 11, 2018 by DWARREN123

[Ski]

When I forwarded it to the origin domain (with a CC to Bud's) the attachment was flagged as a trojan, so they only got the email itself.  When I forwarded it to my ISP as an attachment, my anti virus did not seem to scan the attachment of the attached email.  So, my ISP might have gotten the attachment.  I don't expect to hear anything interesting from them, though.

The actual origin seemed to be the domain in the reply to address (which seems to be an educational institution in Kansas).  In my experience that is unusual.  The spammers and scammers often forge a different from/reply to address than the real origin.

Now the real question is if someone stole Bud's customer contact info.

Thanks for the tips, but I already knew better.  :-)

[GlockSpock]

If you also gets Bud’s emails, then their mailing list could have been stolen. Or sold.

Or someone could have an email list from some other “gun source” (firearm blog, other web store, etc) and simply connecting dots.


Sent from my iPhone using Tapatalk