Here's my good deed for the day. You might not be aware of this, but if you're in the U.S., the government wants your spam. Phishing, stock pump-and-dump schemes, "Nigerian" scams, bogus pharmaceuticals, forward it all (with complete headers, if possible) to spam@uce.gov.
For phishing attempts, many companies have specific addresses to which you should also forward the messages. Here's a list, sampled from phishing attempts that I've received, as well as a few other institutions that come to mind. A few of these (too few) provide a link for information regarding phishing, including the reporting address, right on their main page. Others required digging.
- American Express: Anti.Phishing.Team@aexp.com
- Barclays Bank: internetsecurity@barclays.co.uk
- BB&T: InternetFraud@bbandt.com
- Chase Bank/JP Morgan: abuse@chase.com
- Citibank, Citigroup: emailspoof@citigroup.com
- EBay: spoof@ebay.com
- HSBC (USA-specific): usphishing@us.hsbc.com
- PayPal: spoof@paypal.com
- Visa: askvisacorporate@visa.com
- Washington Mutual: spoof@wamu.com
- Wells Fargo: reportphish@wellsfargo.com
Incidentally, AOL sucks. They might very well have an abuse address for phishing, but if they do they make it much too difficult to find. They don't even list an abuse address in the whois database.
Amazon sucks slightly less. They don't provide an email address, but they have a web form that's not too difficult to find. Go to www.amazon.com, click on "Help", and look for questions on security and phishing. I don't want to provide a direct link, since it's likely to change.
MasterCard is just dumb. They tell you to forward phishing attempts to them, but they neglect to provide an email address. "Priceless," indeed. There is, of course, nothing in whois either.
No comments:
Post a Comment