[JMH3143]

We’ve seen another run of Amazon themed spam doing the rounds, and they may well already be dropping into your mailbox. Here’s the email in question:





The text is identical to the last one we took a look at (notice also the open red padlock, which is a new Gmail feature). As before, the link uses a redirect to send potential victims to an imitation Amazon page – this time, located at

amazon-survey-account-update-awd7256289455(dot)storeyoutdoor(dot)com/login(php)





The people behind the spam campaign have mixed things up a bit, with all new pages to be tricked by. Previously, they lifted any entered login credentials then asked for payment information. This time around, they’re likely trying to distract with nonsense before moving in for the kill (so to speak).

https://blog.malwarebytes.org/fraud-scam/2016/02/the-amazon-survey-phish-back-for-round-2/