Anatomy of a Scam Email

This scam email got past multiple levels of anti-spam services and so is likely to have been sent manually by someone to a specirfic person a.k.a. Spearfishing.  See below for an analysis that explains why we know this is a scam. My comments are in black. Please be aware that some names have been changed to protect the innocent.

-----------------  BEGIN JUNK EMAIL  -----------------

From: Mark XXXsheit <swenmi@wholefoodmarks.org> - This domain was registered 2 days before the email was sent. This info is from the Whois service at Godaddy.com.
Sent: Monday, November 7, 2022 4:03 PM
To: Terry Weadock terry@domsys.com
Subject: Quote Request

Hi Weadock  - Not a very professional way to address someone in an email.

VeryWellKnown Electric Co is out for bids for Computer hardware of the following and will like to know if you can quote or source for them. – VeryWellKnown Electric Co? Why is this email coming from Wholefoodmarks.org?  

RFQ Reference: 018-2021-VeryWellKnown – Official looking RFQ text means nothing.

1, Laptop 2-1 size 13.3 to 14inch i7 16gb ram 1TB Any model Qty 100 – We’ll take nearly any laptop you are willing send us. 100 of them would be awesome!

2, Standard office furitures ( email me the samples avaliable ) – Spelling mistakes, etc. “Email me samples of furitures (sic)”? Must be virtual furitures they are talking about

Please note we are open to New/Refurbished on any brand you carry. – Again, we’ll take anything you are foolish enough to send us.

N:B items are needed for immediate purchase please take note, our payment method is Net 30 days, We hope to have your best price as we wish to maintain a long terms business relationship you.  - We hope you wait 30 days before you start looking for us and/or the merchandise. We’ll be long gone by then.

We look forward to hearing from you. – Uh huh.

Upon price approval a Purchase Order will be issued and vendor registration form. – This way we don’t have to give you a fake credit card.

Looking forward to your warm response the soonest possible. – Feeling warm alright. Uh-Huh.

Warm regards, - Sure bud.

Mark XXXsheit

Strategic Sourcing Manager

VeryWellKnown Electric Co

-----------------  END JUNK EMAIL  -----------------

Previous
Previous

Happy Holidays from Dominant Systems

Next
Next

Protecting Your Network from Ransomware Using 2 Different Security Vendors