sircles.net Computer Support The sircles IT blog | You have received 6 files via WeTransfer - Spam Warning

The sircles IT blog Internet Safety & Security, Windows Tweaks and Server Fixes

You have received 6 files via WeTransfer - Spam Warning

9. October 2019 10:19 by sircles in SPAM, Phishing
You have received 6 files via WeTransfer - Spam Warning   Yet another WeTransfer fake email, th

You have received 6 files via WeTransfer - Spam Warning

 

Yet another WeTransfer fake email, these still seem to be successful with people - the most important check is always to hover over the link in question and look at what the real URL (unique resource locator) actually points to.

In this case we can see it is:

 

And not WeTransfer at all and so DO NOT CLICK!!!!

It's that simple, every time!

Anyway, let us have a look at this email:

 

From: WeTransfer [mailto:no-reply@wetransfer.com]
Sent: 08 October 2019 08:00
To: Recipient
Subject: You have received 6 files via WeTransfer

 

 

Image removed by sender. Click 'Download images' to view images

 

 

email@domain.com
You have received files via WeTransfer

6 items, 582 KB in total Will be deleted on 15 October, 2019

Get your files

 

Download link
wetransfer.com/downloads/6cb13ecc792158b13a588db0fddfdhjfdh36999320191007034443/ce77aa0a16e69998792f24aec9d001ee20191007034443/1f9caf

6 items

Invoice 01120613_001_2017_0135.pdf

36.4 KB

payment_confirmation_1595_001_20161223_1528.pdf

46.3 KB

BANK_REMITTANCE_0104202.pdf

88.6 KB

Commercial Invoice SSD_14 DEC 2016.xlsx

160 KB

Order Confirmation 010235-002.pdf

213 KB

updated 1614_001_20170104_0953.pdf

37.6 KB

 

To make sure our emails arrive, please add noreply@wetransfer.com to your contacts.

 

About WeTransfer      Help      Legal      Report this transfer as spam

 

The 'Get your files' link is actually point ing to: https://busanamuslimah.id/?email=email@domain.com which forwards you to https://go.nuage.ai/hag/en/?email=email@domain.com where the fake wetransfer site lurks, it has already been marked as dangerous on Google Chrome and Microsoft Edge so nothing to see here...

Add comment