<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>amazon &#8211; Startupware: Managing Startups</title>
	<atom:link href="https://www.startupware.com/tag/amazon/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.startupware.com</link>
	<description>Autorunning Software &#38; Running a Software Business</description>
	<lastBuildDate>Thu, 20 Dec 2018 16:15:04 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>
	<item>
		<title>Is That eMail for Real?</title>
		<link>https://www.startupware.com/newsletter-reprints/is-that-email-for-real/</link>
		
		<dc:creator><![CDATA[Jerry Stern]]></dc:creator>
		<pubDate>Thu, 20 Dec 2018 16:15:01 +0000</pubDate>
				<category><![CDATA[Newsletter Reprints]]></category>
		<category><![CDATA[amazon]]></category>
		<category><![CDATA[computer security]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[security]]></category>
		<guid isPermaLink="false">https://www.startupware.com/?p=1905</guid>

					<description><![CDATA[<p>OK, well then, would you click on this email? I don't remember ordering a pricy server from Amazon, but it looks like I'm getting one. I guess I'd better look in there and see who ordered it for me; could be that my account was hacked.</p>
<p>The post <a rel="nofollow" href="https://www.startupware.com/newsletter-reprints/is-that-email-for-real/">Is That eMail for Real?</a> appeared first on Startupware.com. Visit to read more about software design, malware, and computer security.</p>
]]></description>
										<content:encoded><![CDATA[
<p>The easiest way for hackers and 
ransomware to mess with your computer is social engineering. Basically, 
that means ‘Wear the appropriate repair-guy uniform, walk into the 
building looking confident, and go directly to the system that you will 
be &#8220;fixing.&#8221; No one challenges that, right?</p>



<p>OK, well then, would you click on this 
email? I don&#8217;t remember ordering a pricy server from Amazon, but it 
looks like I&#8217;m getting one. I guess I&#8217;d better look in there and see who
 ordered it for me; could be that my account was hacked.&nbsp;</p>



<figure class="wp-block-image"><img fetchpriority="high" decoding="async" width="664" height="483" src="https://www.startupware.com/wp-content/uploads/2018/12/FakeAmazon.jpg" alt="Fake Amazon Order" class="wp-image-1906" srcset="https://www.startupware.com/wp-content/uploads/2018/12/FakeAmazon.jpg 664w, https://www.startupware.com/wp-content/uploads/2018/12/FakeAmazon-300x218.jpg 300w" sizes="(max-width: 664px) 100vw, 664px" /></figure>



<p> So what&#8217;s wrong with it? Here goes, most obvious and visible items first: </p>



<ul class="wp-block-list"><li> I ordered no such thing.</li><li>The sender&#8217;s email address has the  wrong domain, ‘amazons.com&#8217; which is also not the web address for Wonder  Woman&#8217;s family island. </li><li>The return address for Amazon orders is  generally auto-confirm@amazon.com.</li><li>The format of the email is simpler  than the usual Amazon shipping confirmation, missing gray backgrounds,  logos, and a picture of each item ordered. It looks a lot like an Amazon  confirmation from ten years ago.</li><li> The order number is not a text link in the email, and the last section has too many numbers.</li><li>&#8220;it may take 24 hours for tracking  information to be available in your account.&#8221; No, tracking shows up in  Amazon before the email is sent; it&#8217;s Fedex and UPS that will just say  ‘label printed&#8217; until the next morning.</li><li> Finally, not visible above, if you  float your mouse over the ‘Order Details&#8217; button, which is missing the  orange logo that Amazon would normally use, you will see the link, which  goes to usintecmedical_ com_br, not Amazon. That ‘com.br&#8217; points to a site in Brazil, probably hacked. </li></ul>



<p>
What to do? Will this big Dell system&nbsp;show up at my door? No. I <strong>TYPED </strong>‘amazon.com&#8217;
 into my browser, didn&#8217;t follow the link, and checked. No surprises 
there. However, that&nbsp;medical address in Brazil would likely have looked 
like an Amazon page, asked for a login, which it would keep and use, and
 then forwarded you to the real Amazon. Or the site would attempt to 
install malware. Be suspicious. These fake confirmations can look like 
they come from nearly any large company.

</p>
<p>The post <a rel="nofollow" href="https://www.startupware.com/newsletter-reprints/is-that-email-for-real/">Is That eMail for Real?</a> appeared first on Startupware.com. Visit to read more about software design, malware, and computer security.</p>
<p>Original article: <a href="https://www.startupware.com/newsletter-reprints/is-that-email-for-real/">Is That eMail for Real?</a>.</p>]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
