Help with unusual email

[amdx]

Hi guys,
I have a friend that mostly likely died while on a sailing trip.
There is not much hope anymore, the last contact was in May, when they
were sailing from New Zealand to Australia and they reported "bare poles
while in a storm"
I just received an email with her name in the From line and "Fwd, News"
in the Subject line.
The body contained this, Don't click it, malicious warning on my computer.
hello! http://tatarmetal.com/gll/
The site is listed as being in Istanbul Turkey.
I don't believe it is from her, but I'm curious how the originated.
Any guidance, Mikek :-(

 

[Tim Williams]

E-mail headers are easy to spoof. All it takes is one example message
from a victim's account, no hacking necessary.

Tim

 

[Don Y]

Hi guys,
I have a friend that mostly likely died while on a sailing trip.
There is not much hope anymore, the last contact was in May, when they
were sailing from New Zealand to Australia and they reported "bare poles
while in a storm"

Bummer. Sorry to hear that. Hopefully, she'll turn up a few
months from now with tales of her mad romps on wild, virgin
beaches!

I just received an email with her name in the From line and "Fwd, News"
in the Subject line.
The body contained this, Don't click it, malicious warning on my computer.

Advice: alter such URLs before posting (as below)

hello! hXXp://tatarmetal.com/gll/

"Yeah, like I'm really going to think a FREIND of mine is
going to send me a one word, GENERIC message and a 'random'
link to click on! (which key to I press to DELETE..?)"

The site is listed as being in Istanbul Turkey.
I don't believe it is from her, but I'm curious how the originated.
Any guidance, Mikek :-(

It's easy to synthesize email addresses with portions
of information gleaned about "your contacts" from a variety
of sources -- including YOU!

People still persist in NOT using Bcc headers for group
communications. It's easy to rummage through a mbox
harvesting any/all email addresses (and "screen names"
associated with them).

How many of your friends would recognize an email from
"amdx" <malwaresite.com> as being bogus? Would they even
*see* the "<malwaresite.com> in their email agent's
configuration?

Email addresses like "[email protected]" are bad because
it's so easy to synthesize one that *looks* legitimate -- if
you can con an "open" mail relay into accepting/forwarding
it for you!

[I used to receive messages from "[email protected]"
but I can assure you hthey weren't from William J! :> ]

 

[Greegor]

You know how to look at the "original" or "source" code for the email, right?

Post just the header part of the message.