Phishing email - How do they know that I am a malwarebytes user

[stevereno]

Phishing email - How do they know that I am a Malwarebytes user?

They have my full name and email address and know that these are associated with Malwarebytes

Uploading as a zip since .msg is not allowed this is a bit ridiculous.

Steven_ Your Order No_ 194650DRE has been delivered.zip

[Porthos]

It is a scam attempt to get you to call the scammer who will want to access your computer remotely or ask for more personal financial info.

Your email is probably on lists from prior breaches not related to Malwarebytes.

 

[stevereno]

Yes, thanks, it's really concerning that they have my full name, email address and that these are associated with my Malwarebytes subscription.

Has Malwarebytes had some kind of breach?

 

[AdvancedSetup]

No, there has been no breach. This is actually nothing new. It's been with all of us for quite a while now. One of the links from krebsonsecurity is back from 2014 about this

 

How to spot a "fake order" scam
https://support.microsoft.com/en-gb/topic/how-to-spot-a-fake-order-scam-e13350ca-1fa0-4e81-a452-e79aa009c4e0

Be Wary of ‘Order Confirmation’ Emails
https://krebsonsecurity.com/2014/12/be-wary-of-order-confirmation-emails/

Beware, It’s a Scam!
https://www.fdic.gov/resources/consumers/consumer-news/2020-10.html

Fraudulent PayPal Order Confirmation Phishing Emails
https://www.cyber.nj.gov/garden_state_cyber_threat_highlight/fraudulent-paypal-order-confirmation-phishing-emails

Phishing Scam – 07/13/2022 – Purchased order details
https://blogs.k-state.edu/scams/2022/07/13/phishing-scam-07-13-2022-purchased-order-details/

 

 

[David H. Lipman]

Perhaps your PII was harvested from the Internet and then used in this Tech Support Scam email.

Many scour the 'net and research a potential victim and then use language, subject matter and verbiage in such a way to be more persuasive in their scam.  This kind of targeted scamming has a greater potential of reeling in a victim than willy-nilly broadcasting a given scam.

 

Edited June 8, 2023 by David H. Lipman
Edited for content, clarity, spelling and/or grammar