Beware! Its Cyber World - - Summary:
Email claims that the user's email account has exceeded its storage limit and instructs him or her to reply with the account username and password in order to increase the mailbox size and restore full functionality.
In fact, this is an attempt to steal the login details, username and password, from the targeted victims to use this information for malicious intentions; as it was attempted many time before using different wordings and various stories.
Beware of messages that ask you to send email account login details to rectify a problem. They are likely to be scams designed to steal login information
Before we have a detailed look at this attempt; let's go through the contents of the mail given below:
In fact, this is an attempt to steal the login details, username and password, from the targeted victims to use this information for malicious intentions; as it was attempted many time before using different wordings and various stories.
Beware of messages that ask you to send email account login details to rectify a problem. They are likely to be scams designed to steal login informationBefore we have a detailed look at this attempt; let's go through the contents of the mail given below:
===========================================
From: System Administrator
Subject: RE; Your E-MailBox Has Exceeded Storage Limit!
Attention:
RE; Your E-MailBox Has Exceeded Storage Limit!
Your Emailbox has exceeded the storage limit. You may not be able to send or receive new mail until your mailbox size is increased by your System Administrator.
To help us re-set increase the size on our database prior to maintain your Mailbox, you must contact your system administrator via Email with these informations, to increase your storage limit automatically. You do not need to be present at our Office.
Username: ................
Password:.................
You will continue to receive this warning message periodically if your inbox size continues to exceed its size limit or between 18MB and 20 MB.
=======================================
Beware! Its Cyber World - - Explanation:
This message, which purports to be from the "System Administrator", claims that the recipient's email account has exceeded its storage limit and the sending and receiving of email may therefore be disrupted. The message instructs the recipient to reply to the email with his or her username and password so that the "System Administrator" can reset the account and increase the size of the database storage limit.
However, the message is not from the "System Administrator" or anyone else at the account holder's email service provider. Instead, the message is a phishing scam designed to trick recipients into handing over their web mail login details to Internet criminals.
Those who reply to the message with their login details as instructed will in fact be handing over access to their webmail account to scammers who can then use it as they see fit. Once in their victim's email account, these criminals can then use the account to send spam messages, or in many cases, send other kinds of scam emails.
Scammers often use such compromised email accounts to launch instances of the "stranded friend" scam. In this scam, criminals use a hijacked email account to send out messages to everyone on the account's contact list. These emails claim that the account holder is stranded in a foreign country without money or resources due to a robbery. They ask the recipient to send money urgently to help their "friend" return home. Because the messages are being sent from the hacking victim's own webmail address and are likely to include his or her real name and email signature, at least a few recipients are likely to believe the claims in the email and send money as requested. Of course, any money sent will be pocketed by the criminals running the scam. Meanwhile, the real owner of the compromised account may not even be aware that his or her account is being used for such nefarious purposes.
Webmail accounts sometimes do exceed their allotted quota and some mail systems may send out automated messages informing their users of this. However, no mail administration system is ever likely to ask users to send their username and password via an email in order to fix an over-quota account. Users can normally remedy the problem of an over-quota account themselves by simply logging in and freeing up room by deleting unnecessary emails.
Scammers regularly use such tactics to steal login information. Some scam emails may claim that the user must submit login details to prove his or her identity after a system upgrade. Others, like the one discussed here, claim that there is a problem with the account and the user must send login information so that the "problem" can be rectified. Be wary of any unsolicited message that asks you to supply your webmail login details by replying to an email. All such requests are likely to be scams.
However, the message is not from the "System Administrator" or anyone else at the account holder's email service provider. Instead, the message is a phishing scam designed to trick recipients into handing over their web mail login details to Internet criminals.
Those who reply to the message with their login details as instructed will in fact be handing over access to their webmail account to scammers who can then use it as they see fit. Once in their victim's email account, these criminals can then use the account to send spam messages, or in many cases, send other kinds of scam emails.
Scammers often use such compromised email accounts to launch instances of the "stranded friend" scam. In this scam, criminals use a hijacked email account to send out messages to everyone on the account's contact list. These emails claim that the account holder is stranded in a foreign country without money or resources due to a robbery. They ask the recipient to send money urgently to help their "friend" return home. Because the messages are being sent from the hacking victim's own webmail address and are likely to include his or her real name and email signature, at least a few recipients are likely to believe the claims in the email and send money as requested. Of course, any money sent will be pocketed by the criminals running the scam. Meanwhile, the real owner of the compromised account may not even be aware that his or her account is being used for such nefarious purposes.
Webmail accounts sometimes do exceed their allotted quota and some mail systems may send out automated messages informing their users of this. However, no mail administration system is ever likely to ask users to send their username and password via an email in order to fix an over-quota account. Users can normally remedy the problem of an over-quota account themselves by simply logging in and freeing up room by deleting unnecessary emails.
Scammers regularly use such tactics to steal login information. Some scam emails may claim that the user must submit login details to prove his or her identity after a system upgrade. Others, like the one discussed here, claim that there is a problem with the account and the user must send login information so that the "problem" can be rectified. Be wary of any unsolicited message that asks you to supply your webmail login details by replying to an email. All such requests are likely to be scams.
