Film-Tech Forum ARCHIVE: I.M.E. subscribers: Phony UPS e-mail, caution

This is topic I.M.E. subscribers: Phony UPS e-mail, caution in forum Film-Yak at Film-Tech Forum ARCHIVE.

To visit this topic, use this URL:
https://ft-forum.com/ft/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic;f=8;t=005771

Posted by Mike Blakesley (Member # 26) on 04-23-2009, 06:09 PM:

Well this is really weird.

We get the Independent Marketing Edge via e-mail, and the store I work for during the day has a UPS account. We do our theatre shipping through that account. There's totally no connection between IME and our UPS account.

Yesterday, I got an email purportedly from UPS Customer Service that said I had an "ePackage" and I should click here to retrieve it. The subject line had the UPS account number in it. There was no mention of I.M.E. in the email, but when I looked the "link" I could see the letters "ime" in the URL.

I was curious, so I copied the link and stripped out all of the URL except for the beginning, leaving "https://epackage1/ups.com". It led to a site that looks sort of like a UPS site (has the logo) but is obviously a phony site. And it was asking for my IME login information.

I called Dan at IME and he is going to have his web person check into it, but he said it's nothing from them -- so if you get a similar email, hit the delete key.

I have no idea how our UPS account and the IME account got hooked up here -- because the UPS account is through my day job, the one has nothing to do with the other.

Posted by John Hawkinson (Member # 1135) on 04-23-2009, 06:35 PM:

No relation to Independent Marketing Edge.
This is a UPS-internal installation of Tumbleweed IME ("Internet Messaging Exchange"), a web-based document delivery software package.

I would just paste in the URL in full.

Also, I'm pretty certain you mean https://epackage1.ups.com, not https://epackage1/ups.com

--jhawk

Posted by Dennis Benjamin (Member # 1137) on 04-23-2009, 06:53 PM:

On this subject, however:

Every once in a while I actually look in my SPAM e-mail box and cannot get over how much junk mail has familar names and subjects in the subject line. Also, how much SPAM has very similar 'sent' names to actual people that I know. Like they are really monitoring my real mail info and then pulling that info to send me phishing scams or something. Which - BTW- I know that is happening. I catch myself almost opening this fake mail every once in a while.

[Mad]