The likelihood is that you’re the mileage and travel expert for your family and circle of friends, so even though you’d never fall for this scam, you should be aware in case they come to you about it.
Last year, people began receiving emails like the one above that was received by blogger and SkyMiles Geek, Rene over at DeltaPoints.
These emails usually come in the form of a fake confirmation for some supposedly “recently purchased tickets” and contain instructions to click a link or open an .EXE attachment in order to view the ticket.
The deception works when the recipient, concerned about receiving a confirmation for a ticket they never purchased, follows the instructions and their computer gets infected with malware.
From: firstname.lastname@example.org [mailto:email@example.com]
Sent: Thursday, November 17, 2011 5:17 PM
Subject: Re: Your Flight Order N590-5507130
FLIGHT ELECTRONIC NUMBER 8532856
DATE & TIME / NOVEMBER 28, 2011, 11:17 PM
ARRIVING: NEW YORK JFK
TOTAL PRICE : 278.02 USD
Please download and print out your ticket here:
It’s obvious to you and me that it’s a fake email (apparently the scammers are to lazy to even produce any fake graphics) but to others (particularly elderly parents) it might very well seem legit.
If someone does come to you after they’ve fallen victim to the scam, they should:
• Run a virus check to remove any malware
• Change their AA.com password
• Confirm that the email address on file with AA.com is correct and hasn’t been reset by the scammers
• Contact their bank if they think that finanacial account information may have been exposed
• Forward a copy of the email, including the header to firstname.lastname@example.org
You can visit AA.com for more info.