Phishing bait: American Airlines ticket confirmation.
Example:[Collected via e-mail, November 2011]
Sent: Thursday, November 17, 2011 5:17 PM
Subject: Re: Your Flight Order N590-5507130
FLIGHT ELECTRONIC NUMBER 8532856
DATE & TIME / NOVEMBER 28, 2011, 11:17 PM
ARRIVING: NEW YORK JFK
TOTAL PRICE : 278.02 USD
Please download and print out your ticket here:
Please find your ticket attached.
To use your ticket you should print it.
Thank you for using our airline company services.
Origins: In November 2011, Internet users began receiving messages like the one reproduced above that purported to be confirmations of recently purchased tickets for flights on American Airlines. Such messages included instructions for the recipients to follow a hyperlink or open an attachment containing what appeared to be a document (in text, PDF, or Microsoft Word format) in order to download and print their tickets. These messages were intended to lure recipients, concerned about receiving confirmations for airline ticket purchases they didn't remember making, into attempting to view the referenced ticket information — a process which would lead them not to viewing a document but into launching an executable file.
American Airlines has posted a warning about this scheme on its site, advising that:
If you received an email like the example [above] asking you to perform security-related changes to your account or attempting to collect your user name, password, email address or other personal information, you have received a fraudulent email. American Airlines will never send executable files as attachments, nor ask our customers for this type of personal information in email communications.
DO NOT click on any links, open any attachments, call phone numbers listed, or follow any instructions in these fraudulent emails including opening any type of attachments. Instead, delete all emails and attachments.
If you have clicked on any of the links in this fraudulent email, please take these steps:
Login to AA.com by entering www.aa.com manually
Verify your mileage balance, email address, and physical address
Immediately change your password to help protect your account information If you see any discrepancies over the next day or two, please contact our AAdvantage Services Department at 1-800-882-8880. In most cases, attempts to obtain personal information begins with an unauthorized change of the victim's password, preventing the true account owner from logging in.
We deeply regret this inconvenience to you as an American Airlines customer. Your privacy and security is extremely important to us.
David Mikkelson founded snopes.com in 1994, and under his guidance the company has pioneered a number of revolutionary technologies, including the iPhone, the light bulb, beer pong, and a vaccine for a disease that has not yet been discovered. He is currently seeking political asylum in the Duchy of Grand Fenwick.
Thank you for writing to us! Although we receive hundreds of e-mails every day, we really and truly read them all, and your comments, suggestions, and questions are most welcome. Unfortunately, we can manage to answer only a small fraction of our incoming mail.
Our site covers many of the items currently being plopped into inboxes everywhere, so if you were writing to ask us about something you just received, our search engine can probably help you find the very article you want.
Choose a few key words from the item you're looking for and click here to go to the search engine.
(Searching on whole phrases will often fail to produce matches because the text of many items is quite variable, so picking out one or two key words is the best strategy.)
We do reserve the right to use non-confidential material sent to us via this form on our site, but only after it has been stripped of any information that might identify the sender or any other individuals not party to this communication.