A couple of things: 1.) Notify Yahoo immediately of this abuse - have them shut down that account.
2.) What type of server is your store running on? Make sure that server is secure- hire a security firm to check it out. 3.) You may need to check to see if any other customers were contacted by this bogus account. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > [EMAIL PROTECTED] > Sent: Thursday, August 01, 2002 3:39 PM > To: [EMAIL PROTECTED] > Subject: [IMail Forum] Help? Might have been hacked or something. > > > > I use imail server but I don't think this problem is related: > > This is the best list I know of to ask this question. > Let me set this up first then refer to the following text. > > A customer purchased an item from our online store www.magicstore.com > We received the order and everything was great. Then, today this > customer sends me this following email and asks why we have a yahoo > account. We don't have a yahoo account and we did not send him this > email. Does anyone know of this scam and how it was accomplished? > > Return-Path: <[EMAIL PROTECTED]> > Received: from rly-ye01.mx.aol.com (rly-ye01.mail.aol.com > [172.18.151.198]) by air-ye01.mail.aol.com (v87.18) with ESMTP id > MAILINYE12-0801141211; Thu, 01 Aug 2002 14:12:11 -0400 > Received: from web13003.mail.yahoo.com (web13003.mail.yahoo.com > [216.136.174.13]) by rly-ye01.mx.aol.com (v87.18) with ESMTP id > MAILRELAYINYE17-0801141207; Thu, 01 Aug 2002 14:12:07 -0400 > Message-ID: <[EMAIL PROTECTED]> > Received: from [202.150.80.58] by web13003.mail.yahoo.com via HTTP; > Thu, 01 Aug 2002 11:12:06 PDT > Date: Thu, 1 Aug 2002 11:12:06 -0700 (PDT) > From: "The Magic Store.com" <[EMAIL PROTECTED]> > Subject: The Magic Store Order Number 50 > To: [EMAIL PROTECTED] > MIME-Version: 1.0 > Content-Type: multipart/alternative; boundary="0-1958864576- > 1028225526=:56749" > > > > --0-1958864576-1028225526=:56749 > Content-Type: text/plain; charset=us-ascii > > > Hello, > > Thank you for your recent order. As you may already know, over the > last few years, the number of fraudulent transactions occurring over > the Internet has been on the rise. Because of this, our credit card > processing bank has requested us to take certain measures to prevent > such fraud from occurring. > > In order to fulfill this request, The Magic Store is required to > check the authenticity of your order. To complete your order, please > provide us with : > > - CVV2 or CVC ( 3 last digits number on back of card for Visa and > Mastercard) > - Social Security Number > - Date of Birth > > in order to process your credit card and complete the order. If this > information is not received, your order will be cancelled. > > We apologize for any inconvenience caused. We hope that you comply > with our request so your order can be completed. > And please reply to this email ([EMAIL PROTECTED]) > > Thank you, > > > The Magic Store > "the best magic on the web" > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Please visit the Knowledge Base for answers to frequently asked > questions: http://www.ipswitch.com/support/IMail/ > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
