Fake Newegg Emails

As you may know we actively monitor SPAM messages as a means for the distribution of viruses and other malware.  Recently we’ve noticed a series of NewEgg order confirmations being sent that appear to be very well thought out so we thought we’d make mention of it and warn our customers about them.

 As with all email messages you should check the URL link by placing your mouse over any links in email messages and confirm that the actual link is going to take you to the right domain.  Links that start with IP addresses are the easiest to identify as fake or malicious.  Others however at least take the step of putting the spoofed domain in the URL such as www.facebook.gotcha.com where this address belongs to gotcha.com not facebook.

 These messages that appear to be NewEgg order confirmations are very well designed and look almost identical to real NewEgg order confirmations.  In fact if you mouse over the menu at the top, those links will actually take you to NewEgg.com.  However, the account and order information links take you to an IP address and will load an index.html file.

 We didn’t follow these links to see what happened because we didn’t want to risk infection either, so we definately recommend that you do not as well.

 For more information about avoiding email and web distributed infections check out our article here.