Qantas 'Seat Selection' spam

[Happy Trails]

I imagine they'd have a better strike rate if they used something like "Double Status Credits" or "Free Upgrade" rather than "seat selection" in the subject line.

 

[AVC]

Some simple rules when using email.

Never, ever, ever click on a link in an email. Go to the URL in your bookmarks if it's a known company (like Qantas)

And, NEVER, EVER, EVER, open a .zip attachment, even from someone you know. Trojan and viruses are spread by opening executable files, like dodgy zip files, or links that aren't actually links, but look like them. This also holds very true for any attachment that has .exe on the end.

See the URL? It says "yourbooking.qantas.com.au" as opposed to qantas.com.au/whatever.

Some of the really good scams even have screens that look like the original (insert bank name here) and (nearly) all the links work (to the actual bank site) except the one they want you to click on to, like the reset password.

Keep your anti virus soft ware up to date. It's worth every cent you pay for it. And use a firewall.

 

[k_sheep]

Good to see people using their talents to do good.

Oxygen thieves....

Virgin paid them to do it

Joking aside, there's a ridiculous amount of money in IT security, on both the right and wrong side of the law.

 

[oz_mark]

See the URL? It says "yourbooking.qantas.com.au" as opposed to qantas.com.au/whatever.

The email address ( Qantas Customer Services ([email protected]) ), is where I commonly get Qantas emails from. Flight departure information, for example.

The itineraries come from (Qantas Customer Services ([email protected]))

There is nothing actually wrong with that URL.

However, I have never seen anything other that pdf attachments. Most emails just come with links.

 

[jgm]

Some simple rules when using email.

Never, ever, ever click on a link in an email. Go to the URL in your bookmarks if it's a known company (like Qantas)

And, NEVER, EVER, EVER, open a .zip attachment, even from someone you know. Trojan and viruses are spread by opening executable files, like dodgy zip files, or links that aren't actually links, but look like them. This also holds very true for any attachment that has .exe on the end.

See the URL? It says "yourbooking.qantas.com.au" as opposed to qantas.com.au/whatever.

Some of the really good scams even have screens that look like the original (insert bank name here) and (nearly) all the links work (to the actual bank site) except the one they want you to click on to, like the reset password.

Keep your anti virus soft ware up to date. It's worth every cent you pay for it. And use a firewall.

Better still - get a MAC!

 

[moa999]

Macs now have plenty of Viruses.

Better still, use Ubuntu or any *nix equivalent.

 

[lovestotravel]

So, if these emails appear to be targeted at legitimate Qantas Frequent Flyers with upcoming flights, does that then suggest there has been a data breach at QF?

No it doesn't

Given the number of people that would have Qantas flights booked for the next year it's a safe bet that a mass email to tens of thousands of email address will get quite a few people who do have QF flights booked

 

[lovestotravel]

Some simple rules when using email.

Never, ever, ever click on a link in an email. Go to the URL in your bookmarks if it's a known company (like Qantas)

And, NEVER, EVER, EVER, open a .zip attachment, even from someone you know. Trojan and viruses are spread by opening executable files, like dodgy zip files, or links that aren't actually links, but look like them. This also holds very true for any attachment that has .exe on the end.

Keep your anti virus soft ware up to date. It's worth every cent you pay for it. And use a firewall.

This pretty much sums up how to use the internet!

 

[Mal]

This is part of a long running malware compaign that has been targetting big brands. Other iterations have included Southwest, Jetstar, British Airways, American Airlines, United etc.
There are also similar emails targeting UPS, Fedex, Australia Post, as well as the FBI, Australian Federal Police and ATO.

Any email that promises something you don't expect needs to be treated with caution. Particularly when they have "PDFs" or zip files attached.

 

[markis10]

Virgin paid them to do it

Joking aside, there's a ridiculous amount of money in IT security, on both the right and wrong side of the law.

Mr McAfee is probably not a good example of that statement!

 

[flyingfan]

In the last day I've received two spam emails with the subject 'Jetstar Flight Itinerary' quoting two separate PNRs and with 'Itinerary.pdf.zip' attachments.

 

[Pushka]

I've received four spam emails from Jetstar today too each containing a zip attachment and the subject of "Your Jetstar itinerary" or similar.