Amazonで注文していないのに届く迷惑メールにご注意

ヤマト、楽天を騙る迷惑メールなど今でも頻繁に届きますが、最近Amazon.com（英語）を騙る迷惑メールが連続で届きました。ご注意ください。

件名「Your Amazon.com order has dispatched (#(数字)-(数字)-(数字))」
1. 添付ファイル
2. ヘッダー情報
ここ最近のその他の迷惑メール
最後に

件名「Your Amazon.com order has dispatched (#(数字)-(数字)-(数字))」

今回のメールはオーダー受付時の確認メールです。

突然届きましたが、海外のAmazonで何も買った覚えはないですし、何より添付ファイルがあるのが怪しいです。

以下本文です。リンクなどはAmazon.com本物なので一瞬信じてしまいました。

Dear Customer,
Greetings from Amazon.com,
We are writing to let you know that the following item has been sent using FedEx.
For more information about delivery estimates and any open orders, please visit:http://www.amazon.com/your-account
Your order #(数字)-(数字)-(数字) (received November 8, 2016)
Your right to cancel:
At Amazon.com we want you to be delighted every time you shop with us. O=
ccasionally though, we know you may want to return items. Read more about o=
ur Returns Policy at:http://www.amazon.com/returns-policy/
Further, under the United Kingdom’s Distance Selling Regulations, you have =
the right to cancel the contract for the purchase of any of these items wit=
hin a period of 7 working days, beginning with the day after the day on whi=
ch the item is delivered. This applies to all of our products. However, we =
regret that we cannot accept cancellations of contracts for the purchase of=
video, DVD, audio, video games and software products where the item has be=
en unsealed. Please note that we are unable to accept cancellation of, or r=
eturns for, digital items once downloading has commenced. Otherwise, we can=
accept returns of complete product, which is unused and in an “as new” con=
dition.

Our Returns Support Centre will guide you through our Returns Policy and, w=
here relevant, provide you with a printable personalised return label. Ple=
ase go tohttp://www.amazon.com/returns-supportto use our Returns Suppor=
t Centre.

To cancel this contract, please pack the relevant item securely, attach you=
r personalised return label and send it to us with the delivery slip so tha=
t we receive it within 7 working days after the day of the date that the it=
em was delivered to you or, in the case of large items delivered by our spe=
cialist couriers, contact Amazon.com customer services using the link bel=
ow within 7 working days after the date that the item was delivered to you =
to discuss the return.

https://www.amazon.com/gp/css/returns/homepage.html

For your protection, where you are returning an item to us, we recommend th=
at you use a recorded-delivery service. Please note that you will be respon=
sible for the costs of returning the goods to us unless we delivered the it=
em to you in error or the item is faulty. If we do not receive the item bac=
k from you, we may arrange for collection of the item from your residence a=
t your cost. You should be aware that, once we begin the delivery process, =
you will not be able to cancel any contract you have with us for services c=
arried out by us (e.g. gift wrapping).

Please also note that you will be responsible for the costs of collection i=
n the event that our specialist courier service collect a large item from y=
ou to return to us.

As soon as we receive notice of your cancellation of this order, we will re=
fund the relevant part of the purchase price for that item.=20

Should you have any questions, feel free to visit our online Help Desk at:=
=20
http://www.amazon.com/help

If you’ve explored the above links but still need to get in touch with us, =
you will find more contact details at the online Help Desk.=20

Note: this e-mail was sent from a notification-only e-mail address that can=
not accept incoming e-mail. Please do not reply to this message.=20

Thank you for shopping at Amazon.com

————————————————-
Amazon EU S.=C3=A0.r.L.
c/o Marston Gate
Ridgmont, BEDFORD MK43 0XP
United Kingdom
————————————————-

添付ファイル

添付ファイルはZipファイルで中身はjs(ジャバスクリプト)のファイルのようです。

今回はウィルスブロックされてしまい中身を検証できませんでした。

ヘッダー情報

Received: (qmail 73056 invoked from network); 9 Nov 2016 20:50:55 +0900
Received: from unknown (HELO CVV?CAD?FIN05.cvv.com) (138.185.166.11)
by 0 with SMTP; 9 Nov 2016 20:50:55 +0900
From:“Amazon.com”auto-shipping06@amazon.com
Message-ID: <urn.correios.msg.oi0c2DC2F4eC66735BA57Cf36aB4326ce3.rte-svc-eu-13006.dub3.amazon.com>
Subject: Your Amazon.com order has dispatched (#834-6548050-4322314)
To:sales@nkaremovals.com

最終送信IPがオーストラリア（138.185.166.11）
From(差出人)のアドレスの末尾の数字が変わる　auto-shipping06@amazon.com、shoppingじゃなくてshipping?
宛先が全てsales@nkaremovals.com

ここ最近のその他の迷惑メール

アカウント凍結といった感じのメールです。クレジットが制限がかかり使えなくなったような感じです。

海外サイトを利用している方だと、おや？っと引っかかりそうです

件名「Account temporarily suspended」

Dear Customer.
You have exceeded the limit of operations on your credit card.
Thus, we have temporarily blocked your account.
The full itemization of transactions and instructions are given in the document attached to this message.
Best regards.

こちらのメールは開封通知を要求してくるメールでした。うっかり通知しないよう気をつけてください。

件名「Shell Fuel Card E-bill 784462 for Account (rnd(B,S,F,H,A,D,C,N,M,L)}}(数字) 08/11/2016」

OPHELIA NUNLEY
Last & Tricker Partnership
3 Lower Brook Mews
Lower Brook Street
Ipswich Suffolk IP4 1RA
T: 01473 252961 F: 01473 233709 M: 07778464004
email: ophelia.nunley@iseeboard.com
This e-mail and any attachments may contain confidential and privileged
information and is intended only for the use of the individual or entity to
which it is addressed. If you are not the intended recipient, please notify
the sender immediately by return e-mail, delete this e-mail and destroy any
copies from your system; you should not copy the message or disclose its
contents to anyone. Any dissemination, distribution or use of this
information by a person other than the intended recipient is unauthorized
and may be illegal. We cannot accept liability for any damage sustained as a
result of software viruses and advise you to carry out your own virus checks
before opening any attachment.

件名：「unauthorized access」

Our technical support service has detected unauthorized access to your account.
Due to that, we had to block your account until you confirm your personal information.
To do so, please follow the instructions in the attachment.
Best Regards,
Korey Calhoun
Technical Support