Our Post on “Bogus Virus Email Affecting Sun Country Airlines,” had an increase in traffic these last few days. I thought it was just an isolated case with Sun Country Airlines, as it turns out readers are emailing me other examples from other airlines facing the same problems.
So far, Frontier Airlines, AirTran Airlines and a few others are being attacked. Now Northwest Airlines’ customers are under attack by the email as well.
On July 5th, MarketWatch reported Northwest Airlines warning customers of phony email being sent in their name.
The emails thank the recipient for using the new service “Buy flight ticket Online” on the airline’s website. It states an account has been set up and gives the email user an account number and password. It also tells them how much their credit card has been charged. An attachment is supposed to be the invoice and ticket but instead contains a virus that infects the user’s computer once it is opened.
The email also contains spelling and grammatical errors.
According to Al Lenza, NWA’s VP of E-Commerce, “Customers should be aware that these emails are not coming from the airline. NWA itineraries are specific and contain information that customers will recognize. If the format does not look familiar to you, and you have not recently purchased a ticket, do not open the attachment. Delete the email right away.”
The new airline email virus is coming at a bad time. With airlines facing bankruptcies and layoffs, airlines charging fees galore, and now dangerous emails, what’s next? The airline industry is under attack? What can we do to help? Should we help? How can we protect ourselves?
I don’t have an answer. Yet.
From Leverage with Love,
Austin Chu
Update:
Seems like the email has been hitting other countries than the United States. According to the comments, it has hit the UK and parts of Australia. Word to the wise: Spammers are getting smart, we need to spread the word before and find out how to help each other.







145 comments ↓
I just received just such an email referencing a Virgin America ticket. I didn’t open the zip file, but the quality of the email is much improved over the usual poor grammar.
Readers: Copy and paste your emails to the comment section. I want people to see the examples of the emails.
Here is on we got yesterday pretending to be US Airways. It included a file, “ticket.mim”.
From: ajvbpdl@bpietrini.com
To: ***@****.***
Sent: 8/13/2008 7:15:07 P.M. Pacific Daylight Time
Subj: Your flight ticket N3556074
Greetings,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ***@****.***
Your password: passFLQJ
Your credit card has been charged for $437.60.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
US Airways
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ****@*****.***
Your password: passE7US
Your credit card has been charged for $465.34.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Tim Mcnally
Southwest Airlines
Each e-mail I have received from this (4 in total so far), has been almost identical to the example above. Sometimes, the e-mail seems to be directed to someone else. The password changes, as does the amount “charged” to my credit card (though it is always $4– dollars. The airline changes, as well.
At first I thought I was just recieving notification that belonged to someone else… but I knew in the back of my head something fishy was going on, so when I received two more e-mails of this type this morning, I had to check it out.
Ironically I am waiting on a ‘Legit’ travel ticket/receipt. My girlfriend did the purchasing so I thought this was my confirmation/ticket. I opened a zip folder attached. I am running Nortons now….hoping I can get it easily. What type of virus is it? What is it known to do?
Here’s the email I recieved below:
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: leannesekora@hotmail.com
Your password: passGO8K
Your credit card has been charged for $435.18.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Ruthie Ho
Delta Air Lines
Did you purchase a Delta Airline ticket?
I found a forum which might help you if you downloaded it.
http://forums.corral.net/forumsshowthread.php?p=7997004
I’m from the Netherlands and also got the email which appeared to be from Delta Airlines, message subject: “Your Flight Ticket Online N4587796″ and there was a zipped file attached to the email with a DOC icon called “ticket_983992.zip” and here are the contents:
Good day,
Thank you for using our new service “Buy flight ticket Online” on our
website.
Your account has been created:
Your login: xxxxx@xxxxx.nl
Your password: pass9Q1W
Your credit card has been charged for $476.82.
We would like to remind you that whenever you order tickets on our website
you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to
take off for the journey!
Kind regards,
Delta Air Lines
Good morning,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: minsin1@optusnet.com.au
Your password: pass4HD9
Your credit card has been charged for $403.67.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Alaska Airlines
Luck for me I didn’t open the attachment….thank you..
Good day,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: ***@****.com
Your password: pass25O1
Your credit card has been charged for $455.33.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
United Airlines
Good day,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: fourws@adelphia.net
Your password: passB0PF
Your credit card has been charged for $409.65.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Melanie Starr
Virgin America
My email protection deleted the attachment and left only a report… thought it was strange, so I googled the headder and found this site. Heres mine:
Greetings,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login:xxxxxxxxxt@xxxxxxxxx.com.au
Your password: pass8XFU
Your credit card has been charged for $494.19.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Hawaiian Airlines
My email protection deleted the attachment and left only a report… thought it was strange, so I googled the headder and found this site. Heres mine:
Greetings,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login:xxxxxxxxxt@xxxxxxxxx.com.au
Your password: pass8XFU
Your credit card has been charged for $494.19.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Hawaiian Airlines
oh then I got this one almost straight after:
Good afternoon,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: xxxxxxxx@xxxxxxxx.com.au
Your password: passH9MO
Your credit card has been charged for $487.00.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
US Airways
teli@aquaglass.com VIrgin AMercia
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ***@******.com.au
Your password: pass85WI
Your credit card has been charged for $649.65.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
Your Flight Ticket N9585788
(with attachment Ticket_N141-SK.zip)
Good day,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: ************@*****.***.**
Your password: passR7XZ
Your credit card has been charged for $626.46.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Midwest Airlines
The scam has reached the U.K. It arrived here in my emails this morning. For $657-74. The anti-virus emptied the attachment.
Mine said I had been charged $658.60
=============
Dear Gentlemen,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: pass26LN
Your credit card has been charged for $658.60.
We would like to remind you that whenever …
Kind regards,
Southwest Airlines
Greetings,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: michaelt@XXSXXX.freeserve.co.uk
Your password: pass0GJ9
Your credit card has been charged for $689.38.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
United Airlines
Greetings,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: c@com.a
Your password: passUQYG
Your credit card has been charged for $602.47.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Hawaiian Airlines
I’ve had the SAME problem.. this time from South West Airlines..
“Good afternoon,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: ymcgarry@yvonnemcgarry.co.uk
Your password: passIMZY
Your credit card has been charged for $676.53.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Southwest Airlines”
Notice the bad spell check - “simply print it on a color PRINTED” <– should be PRINTER.
anyways, HELP. its clogged up my computer!
Yup - I got one today and it was very convincing, except for the fact I am English and have even thought of visiting Alaska! I nearly opened the file, but being the cautious type, I checked this site out first. Thank God!
What happens if you’ve been stoopid enough to open the attachment??
Now it’s at United Airlinles. I just got one…
I have just received this one and did not open the zip attachment
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ****@****.co.uk
Your password: passLRZ1
Your credit card has been charged for $604.04.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Frontier Airlines
I made the mistake of opening the attachment. I am now having numerous problems with my computer. My McAfee won’t even open. Has anyone heard of fixes for this?
I am in the uk and recieved one of these emails puporting to be from united airlines.I opened the email but not the attachment, then googled united airlines and rang them. The lady I spoke to assured me that it was not from them, and advised me to delete the email and attachment.Having used a credit card this week to book an airport hotel on an airport computer I am wondering if there is possibly a connection. I have various email addresses and this email appeared after the confirmation of my hotel booking made at a German Airport on a public computer…..
The email was identical to the majority of those above, except that it was from United Airlines, but also an unconvincing email address.
I have just received one of those e-mails with a zip file, of course I’ve not opened it.
Dear Sirs,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: kathym15@optusnet.com.au
Your password: passDTE7
Your credit card has been charged for $609.69.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
AirTran Airways
I googled the header and found your site. The e-mail landed in my ‘In-box’ Just a word of warning, I’m retired these days and thought that I’d enter some competitions to win money or some prizes - BIG MISTAKE - Even though I have very good virus protection this creepy one managed to land in my in box. Unfortunately my personal address, DOB and phone number must be circulating all around ciber space, what an idiot i’ve been.
Hi all,
I also recieved one in Australia, from Southwest Airlines, whom I have never any connection with. The gist of the e-mail is the same as the above examples. I checked my bank account and nothing had been charged to my credit card. I did not open the attachment as I was already suspicious.
In all probability this is the intent - open the mail, get infected, check your bank, virus rings home and delivers your bank login and password. A new phishing scam is born.
Dont get caught!
Thank you for this site. I was wondering where I was flying to. Luckily my computers would not open the attachment.
Good morning,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxxxx@295.ca
Your password: passOR3S
Your credit card has been charged for $648.02.
We would like to remind you that whenever you order tickets on our website you get a
discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off
for the journey!
Kind regards,
United Airlines
Attachments:
Ticket_N141-SK.zip 24 k [ application/zip ] Download
A member in my family got an e-mail from US Airways exactly like the one on “Tim’s” blog..the e-mail was printed out but I don’t know if the purchase was real or not? I wouldn’t be surprised if it was but would like to check it out. I guess my first step is to call the airlines (oh, this e-mail was printed out Aug. 15/08). Any other suggestions? Many thanks.
Good day,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: jason@nextwish.co.uk
Your password: passOAFW
Your credit card has been charged for $698.15.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Continental Airlines
Oooh this is sneaky because I am waiting on travel documents too but it just didn’t sit right with me so I didn’t open the attachment.
It does read very convincing though, here is my spam:
=============
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: *************@*************.***
Your password: passAC3T
Your credit card has been charged for $643.19.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
USA3000 Airlines
==============
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ***@**********.force9.co.uk
Your password: passX3A0
Your credit card has been charged for $684.68.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Midwest Airlines
Thanks for this great information, this is the third such email I received…..Kind of figured it had to be a scam
Good morning,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxx@xxxxxxx.ca
Your password: passH8D4
Your credit card has been charged for $677.35.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
I just received an e-mail for Virgin Airlines. I look in the address and it said it was coming from “bookliquidators.com” with a vague/encrypted address. I didn’t open the attachment. I also went to the Virgin Airlines website to confirm if I was able to login and it gave me a “invalid login” error.
Good day,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: mstinson@bedrockconnections.com
Your password: passBFZR
Your credit card has been charged for $498.23.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
I don’t know if this is related to the airline scam, however, since Fed Ex is an air cargo carrier, I wanted to post it just in case. Has anyone else gotten these?
Unfortunately we were not able to deliver postal package you sent on August the 1st in time
because the recipients address is not correct.
Please print out the invoice copy attached and collect the package at our office
Your FEDEX
Very stupidly I did open the attachment with devastating results. Any ideas as to how I can remove the malware and restore my desktop etc.
This morning I received a similar mail (In Italy)
The mail sent to me has no attachment… but the message in it is the same.
Good morning,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: xxxxxxx@xxx.xx
Your password: passV31C
Your credit card has been charged for $613.79.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
US Airways
I’ve received two emails almost identical to Ash Daulton’s this morning. I knew it was rubbish because it was directed to gibberish email addresses, I don’t travel by air and don’t own a credit card! Also, I’m not a ‘Sirs’
When I clicked on the link to see if it was a virus threat the checker on Yahoo said it wasn’t but I still didn’t open it.
Emails copied below:
‘Dear Sirs,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: uftcncg@yahoo.co.uk
Your password: passRSI4
Your credit card has been charged for $698.55.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
USA3000 Airlines’
*****************************
‘Dear customers,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: arielag2000d@yahoo.co.uk
Your password: pass7G1J
Your credit card has been charged for $652.08.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
US Airways’
I also received such an e-mail. It was send from somewhere in the Czech Republic.
My virusscanner dit not see the virus in the attachment, but I deleted it anyway. I was an exe-file in a zip-file.
Gertjan from the Netherlands
Received this e-mail from Southwest Airlines just now:
*****
Dear Gentlemen,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxx@xxxxxxxx.nl
Your password: xxxxxxxx
Your credit card has been charged for $692.71.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Southwest Airlines
*****
Thanks to this blog entry I knew it was a scam.
Kind regards,
Rob
The Netherlands
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxx@xxxxxxx.nl
Your password: pass0JJX
Your credit card has been charged for $631.39.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
USA3000 Airlines
Here’s one I received today - I did not open attachment, you NEVER, NEVER should if you don’t know who sent it:
Dear Gentlemen,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: **************************
Your password: passT**R
Your credit card has been charged for $671.92.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Delta Air Lines
I’m from The Netherlands and received this email today, it scared me a lot. $673 of my credit card and outlook didn’t recognized it as being spam….
Greetings,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: feeleus@zonnet.nl
Your password: passY0I8
Your credit card has been charged for $673.24.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Northwest Airlines
It also hits me in the Netherlands. I don’t understand where they got my email address from. Happily I never open attachment which don’t look familiar to me. So please always be alert and if you don’t trust it never ever open these attachments.
One more …
—–Original Message—–
From: Virgin America [mailto:boqshs@bohemiantechnologies.com]
Sent: Thursday, August 28, 2008 12:00 PM
To: ********@nyc.rr.com
Subject: Your Online Flight Ticket N 86985
Good afternoon,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: *******@nyc.rr.com
Your password: passZ2YS
Your credit card has been charged for $617.69.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
I am in Austria, and got one from Alaska Airlines. I’ve already deleted it, but it was pretty much the same as the others.
Interestingly, it gave my LiveJournal name as login (Your login: [username]@livejournal.com)
I am not too happy about this, because only LiveJournal is supposed to be able to link that account and that e-mail address… hmph.
Have to say, am I glad this article-thing exists; I was confused out of my MIND when I saw this e-mail. Luckily I checked the email address via Google and found it associated with a bunch of other scams (oddly, most of the sites reporting it were in Japanese!) and then found this page. Here’s the one I got–aside from never linking to the airline webpage, and just generally not being professional, it could’ve fooled me!
—-
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxx@xxxx.com
Your password: passDH0T
Your credit card has been charged for $663.98.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Spirit Airlines
Just received same email from Continental Airlines. If this infected my computer what is the remedy?
Dear Savvy Wallet,
I just received such an email from midwest airlines. It’s the same as in the examples mentioned above. I deleted the email. For the good order: I live in Amsterdam, Holland. So the shit hit Europe too.
I can only one thing say: never open a email-attachment, unless your absolute sure it’s save.
With kind regards,
Louis Lucas
Amsterdam, Holland
Following is the email I received from AirTran Airways…or so it says. When I looked at the email address - it didn’t look legitimate. Being a high school computer teacher, I was wary and would not access the zip file. I feel sorry for the ones that did open the zip file to see what this bogus email was all about.
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: I deleted my email address
Your password: I deleted the password they assigned me
Your credit card has been charged for $414.05.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
AirTran Airways
Dear Sirs,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: my e-mail address
Your password: passS306
Your credit card has been charged for $662.41.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Delta Air Lines
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxxxxxxxxx
Your password: passBTWX
Your credit card has been charged for $646.24.
We would like to remind you that whenever you order tickets on our website you
get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take
off for the journey!
Kind regards,
Alaska Airlines
Appears to be out of Russia. Malicious spy ware. Go to http://www.IC3.gov to forward the addressess and headers to investigators tracking IPs.
There is no point saying “it has reached the Netherlands” or any other country. These e-mails get sent out by botnets (which are just networks of normal compromised computers that are remotely controlled by the spammer). If you open the attachment, your computer will become part of the botnet. Besides sending out these e-mails to propagate themselves, the controlled computers will send out spam for which the controller of the botnet will get money, or can be used for other harmful purposes.
Return-path:
Envelope-to:
Delivery-date: Thu, 28 Aug 2008 14:16:13 +0100
Received: from [85.112.216.26] (helo=wipll-26-216-static.81a.tomaszow.pilicka.pl)
by store10.mail.uk.easynet.net with esmtp (Exim 4.63)
(envelope-from )
id 1KYhMA-0004jj-NZ; Thu, 28 Aug 2008 14:16:12 +0100
Received: from [85.112.216.26] by mx01-dom.earthlink.net; Thu, 28 Aug 2008 14:16:10 +0100
From: Sun Country Airlines
To:
Subject: Your Online Flight Ticket N 19341
Date: Thu, 28 Aug 2008 14:16:10 +0100
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=”—-=_NextPart_000_000E_01C90918.9E82B100″
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1158
Importance: Normal
Delivered-To: supernotts@ukonline.co.uk
This is a multi-part message in MIME format.
——=_NextPart_000_000E_01C90918.9E82B100
Content-Type: text/plain;
charset=”Windows-1252″
Content-Transfer-Encoding: 7bit
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: passWJI4
Your credit card has been charged for $656.58.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Sun Country Airlines
I just got this one today.
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: hal.t@……
Your password: passS6N8
Your credit card has been charged for $604.81.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Allegiant Air
What surprised me is that my Norton 360 did not pick this up when scanning the incoming email.
As you all can see, all the letters are the same except for the password and the airlines, but has anybody noticed the grammatical error in the letter….
“simply print it on a color printed”. I assume they wanted to use the word PRINTER!!!!!
I just got this in my junk mail folder, googled it, thats how I got here.
Email reads:
————————
Good day,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: *******@********.**.**
Your password: passD06Q
Your credit card has been charged for $602.50.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
———————-
DO NOT open the attatchment. Report the email to your isp or email providers.
“Print it off on a color printed.” I think they mean printer?
Dear Gentlemen,
Thank you for using our new service “Buy flight ticket Online” on our
website.
Your account has been created:
Your login: ******@*******.com
Your password: passBJZO
Your credit card has been charged for $626.14.
We would like to remind you that whenever you order tickets on our website
you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to
take off for the journey!
Kind regards,
Hawaiian Airlines
Hello,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: passGR61
Your credit card has been charged for $619.24.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
JetBlue Airways
Now in Canada, eh!
I just purchased tickets on Air Transat???
Now I get this….hmmm
It seems like a better deal than what I got
Good afternoon,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: ****@argos-suck.com
Your password: passW6K6
Your credit card has been charged for $638.39.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
I’m from France and have received the following message this morning :
Greetings,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: *********@*****.**
Your password: passDU2P
Your credit card has been charged for $684.30.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Hawaiian Airlines
Reached the UK
Received the following purporting to be from Alaskan Airlines.
Subject : Your Online Flight Ticket N 47915
From : Alaska Airlines<dcjqd@botak-cafe.com
Dear Gentlemen,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: ****@tiscali.co.uk
Your password: passPZPU
Your credit card has been charged for $682.06.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Alaska Airlines
Attached file e_ticket29.zip
This is the one I got:
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website. Your account has been created:
Your login: ***@&&&&&.com
Your password: pass7AK2
Your credit card has been charged for $656.61.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%! Attached to this message is the purchase Invoice and the airplane ticket. To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
USA3000 Airlines
Good morning,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ————-
Your password: passC4OW
Your credit card has been charged for $686.18.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
USA3000 Airlines
i got it from northwest airlines
i reported it as phising scam to hotmail, and it deleted it
sorry i would of posted but i DID NOT open or download the zip
just got an email this morning - my computer ‘flagged it as virus’ - so is definately in the UK now - have sent emails to my addressbook to warn others… mine went..
//
Greetings,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: l*****@blueyonder.co.uk
Your password: passO041
Your credit card has been charged for $696.48.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Northwest Airlines
I got this in my school’s email account:
From: Spirit Airlines
To:
Date: Thu, 4 Sep 2008 20:47:57 +0000
Subject: Your Online Flight Ticket N 78839
Attachments: eTicket_304.zip
——————————————————————————–
Greetings,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxxxxxx@sfu.ca
Your password: passDB3J
Your credit card has been charged for $611.32.
We would like to remind you that whenever you order tickets on our
website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set
to take off for the journey!
Kind regards,
Spirit Airlines
I received the same virus e-mail from JetBlue Airways. Fortunately AVG Free scanned the e-mail and picked up the virus: Win32/Heur
Viruses found in the attached files.
The file eTicket_304.zip: Virus found Win32/Heur. The attachment was moved to the Virus Vault.
The original message follows:
Good day,
Thank you for using our new service “Buy airplane ticket Online” on our website. Your account has been created:
Your login:
Your password: passLNED
Your credit card has been charged for $648.16.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%! Attached to this message is the purchase Invoice and the flight ticket. To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
JetBlue Airways
I received a bogus email supposedly from United Airlines this morning. It exactly mirrors the messages on your website, complete with the spelling errors. I live in the UK.
Some of you wonder “how did they get my email address?” yet you post it right here, in public, on the web, for any harvester to pick up…. make it simpler…next time add your name, social security, date of birth, and all your cc numbers… scammers scam for one reason…. a certain percentage of people make it easy for them.
I have 2 emails exactly like you describe and tried to open them but my computer blocked both of them and they were unable to open so i decided to find out more about them. So I googled the name “buy a flight ticket on line” and this site came up. Thanks for the tips. It’s nearly my 1st wedding anniversary and I thought my husband had organised a surprise and I was curious. Lucky my computer blocked it. I’m deleting it now.
I just got such an email - lucky my anti virus blocked the attachemnt from opening - I pressed report scam in hotmail and it dissapeard!
From the UK
Hello,
Thank you for using our new service “Buy flight ticket Online” on our
website.
Your account has been created:
Your login:
Your password: pass7NXV
Your credit card has been charged for $613.73.
We would like to remind you that whenever you order tickets on our
website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane
ticket.
To use your ticket, simply print it on a color printed, and you are set
to take off for the journey!
Kind regards,
Frontier Airlines
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: XXXXXXXXX@XXXXX
Your password: pass4CHX
Your credit card has been charged for $633.27.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Allegiant Air
I have just received an email similar to the above from Virgin America (not Atlantic!) attaching my tickets which I note was an exe. file. I deleted it immediately.What worries me is that I did purchase Virgin tickets from Airmiles last week. Is this coincidence? I think not.
Hi,
I live in the Netherlands and got the same mail today. I didn’t trust it (because I do not HAVE a creditcard ;-)) and did not open it.
Dear Sirs,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: xx@xx.nl
Your password: passC93C
Your credit card has been charged for $681.46.
We would like to remind you that whenever you order tickets on our website you
get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take
off for the journey!
Kind regards,
US Airways
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our
website.
Your account has been created:
Your login: george.e*******@l****s.co.uk
Your password: passEQLX
Your credit card has been charged for $648.74.
We would like to remind you that whenever you order tickets on our website
you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to
take off for the journey!
Kind regards,
AirTran Airways
IThe virgin america one just landed in Belgium also, just received this & my usually very reliable anti-virus didn’t give a beep:
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ***********
Your password: pass183C
Your credit card has been charged for $680.79.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
I too am now being attacked, and this is happening whilst I am in the middle of sorting out a holiday. This makes the whole process extremely time consuming cause now I have to recheck every reservation or quote request just incase its fake.
I think its about time the government bodies of the civilised world unite to attack this beast. I am happy to put forward the blow copy of the email and will also the supply the sender address of the email hoping this will help crush these morons.
FROM - wfc@bonnevuemanor.com ( should be shutdown and checked by the FBI or CIA
EMAIL.
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ( my real email address )
Your password: passJPUN
Your credit card has been charged for $698.26.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
AirTran Airways
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: passHWQS
Your credit card has been charged for $636.19.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
American Airlines….. i nearly opened it but thought what ticket what account,scam….virus…get rid
its sad to see so many sad poeple with nothin better to do than send this rubbish out..if your not sure what your looking at never never open it read and read again,delete it, its a virus
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: johnsmithsvt@************.com
Your password: passMFIZ
Your credit card has been charged for $637.85.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
United Airlines
I received the following E mail in my spam box. I had never even heard of AirTran Airways so it was an obvious scam particualarly since that airline doesn’t go anywhere I’m interested in as I live in Greece,
<<Your Online Flight Ticket N 65344
Tuesday, 9 September, 2008 4:05 PM
From:
“AirTran Airways”
Add sender to Contacts
To:
Message contains attachments
eTicket_K2.zip (19KB)
Good morning,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: politicon2003@yahoo.co.uk
Your password: passW737
Your credit card has been charged for $696.87.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
AirTran Airways>>
I just want to add that iv got those same exact mails. From “United Airlines” and from “Allegiant Air”. The thing is, that I am a Finnish person(living in Finland too) and I used UA few weeks ago. So, someone got our email addresses snitched.
It is just a scam among others. NP.
Greets, Jonny From Finland.
Dear,
I just received the same mail.
What can we do to stop them ?
Regards
Erik
Hello,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: pass7KDR
Your credit card has been charged for $619.72.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Northwest Airlines
i got the exact one supposedly from delta….. looked suspicious, so i deleted it…..
thanks for above info to prove the scam….
Hello,
I am from Belgium and I had this virus e-mail too. When I wanted to open the attachment my ant-virus program refused to open it.
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: pass2Y08
Your credit card has been charged for $640.87.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
JetBlue Airways
I Live in Belgium and i recently checked out some prices regarding a holiday to Hawai, so i was affraid that i accidentaly booked something, but when i read all of the above……. pfieuw. This is the email with an attachement eTicket_K2.zip, wich contains a virus detected by Bullguard !!
Dear Sirs,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: passWDS9
Your credit card has been charged for $697.35.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Northwest Airlines
Just to let you all know, it has now reached China!!!
mine was yesterday from Frontier Airlines (sort of).
The other obvious error is to address it to
‘Dear GentleMEN’
Fortunately I got a warning before I opened the attachment.
PNB
From: ten@quantatw.com
Subject: Your Online Flight Ticket N 95482
Date: 9 September 2008 12:28:56 BDT
Dear Gentlemen,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: passZUX0
Your credit card has been charged for $607.47.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
JetBlue Airways

Good morning,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxx@xxxxxxxx
Your password: pass4ICH
Your credit card has been charged for $695.80.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Hawaiian Airlines
I’m from the Netherlands and also got the email which appeared to be from Delta Airlines, message subject: “Your Flight Ticket N70595″ and there was a zipped file attached to the email called “eTicket_I2.zip” and here are the contents:
Greetings,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: ……..@…….nl
Your password: pass4U4N
Your credit card has been charged for $636.27.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Delta Air Lines
From Belgium (Europe) : I received allready 2 such emails, one from Delta Airline and one from Spirit Airlines !!! Of course, I did’nt open the attachment.
Kind regards
the thing that tipped me off is that it said if we use their site we get 10% off. That never happens with the airlines.
Got this e-mail on the 9th of September here in Switzerland.
Från: tello@ldneqt.eq.gs.com
Ämne: Your Online Flight Ticket N 57839
Datum: tisdag 9 sep 2008 10.53.25 GMT+02:00
Till: xxxxx@xxxxxx.ch
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxx@xxxx.ch
Your password: passSN50
Your credit card has been charged for $653.02.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Frontier Airlines

[...] I wrote about the recent airline email scam, I didn’t think it was going to last for this long, nor did I think it was going to be such a [...]
I just received an email identical to all these. However at least yahoo was smart enough to slam it into my spam folder, which thankfully alerted me to how bogus it was.
These cheeky buggers are getting smart.
I too recieved this email this morning (13 Sept 2008) I’m in the uk, just to warn you as well.
Dear Sirs,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: passZBY6
Your credit card has been charged for $688.53.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
Country: Norway
Dear Sirs,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxxxxxx
Your password: xxxxxxxx
Your credit card has been charged for $695.76.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Alaska Airlines
Just updated on this post:
http://www.savvywallet.com/2008/09/12/airlines-email-scam-update-buy-flight-ticket-online/
thanks so much for this site - I was really worried that my credit card number was out and was naive enought to try and open the so called flight ticket, but luckily my security program didn’t allow me such a foolish impulse. So they got to Norway too!
here’s is what I received:
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxxx@online.no
Your password: pass62F7
Your credit card has been charged for $641.39.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Virgin America
… kindlier regards
Astrid, Oslo
Dear Gentlemen,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: passQ72Z
Your credit card has been charged for $643.49.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Delta Air Lines
Was happy to se that it was not only me that have recieved a ticket reservation that I did not order.
Message I recieve.
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxx@online.no
Your password: pass72X9
Your credit card has been charged for $624.01.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
US Airways
Kindly regards
Arnfinn, Norway
Country: Finland
Attachment: eTicket_s3.zip
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxx.xxxxx@xxxxx.xx
Your password: pass365A
Your credit card has been charged for $673.10.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Continental Airlines
I got a similar message supposedly from JetBlue Airways. I also got three other emails. All contained a zip-folder attached. One was from someone requesting ‘permit for retirement’ and two were from someone talking about something about a ’statement of fees.’ Thanks for putting up this notice- I’m glad I haven’t opened any of the attached folders. Here are the e-mails:
Good morning,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login:
Your password: passZCU6
Your credit card has been charged for $661.33.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
JetBlue Airways
Here’s another:
Please find attached a statement of fees as requested, this will be
posted today.
The accommodation is dealt with by another section and I have passed
your request on to them today.
Kind regards.
Madeleine
Here’s another:
Please find attached a statement of fees as requested, this will be
posted today.
The accommodation is dealt with by another section and I have passed
your request on to them today.
Kind regards.
Billy
Here’s another:Good day,
We have prepared a contract and added the paragraphs that you wanted to see in it.
Our lawyers made alterations on the last page. If you agree with all the provisions we are ready to make the payment on Friday for the first consignment.
We are enclosing the file with the prepared contract.
If necessary, we can send it by fax.
Looking forward to your decision.
Mark, Ireland
I got one today, the Virgin America version. Apparently my anti-virus system did not recognize it, there was no alert or anything like that. Being of a suspicious nature, I did not open the attachment. I permanently deleted the email and then found this website. Like it’s been said before, don’t open strange attachments and you won’t have to buy a new computer.
Country: The Netherlands
Attachment: eTicket_s3.zip
Subject: Your Online Flight Ticket N 68932
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxxx@xxx.xx
Your password: passA4D2
Your credit card has been charged for $618.38.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Delta Air Lines
This is from Belgium
Hello,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login:
Your password: passUF77
Your credit card has been charged for $652.97.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
US Airways
This is from AFRICA, KENYA:
Dear Gentlemen,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: ******@*******.com
Your password: pass3CQ5
Your credit card has been charged for $651.69.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
USA3000 Airlines
I also received similar e-mail this morning. I luckely couldn’t open the attachement.
I received this one today. I’m in the UK. Did not open it.
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: kathy@wideopenspace.co.uk
Your password: pass64JJ
Your credit card has been charged for $654.48.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Continental Airlines
Hello everybody.
Here’s an example, which I’ve received a few minutes ago:
——–
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: skater02@gmx.at
Your password: PASS8D8T
Your credit card has been charged for $978.26.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Sun Country Airlines
————
I received the email from svnewgi@borjessons.com
Wonder why I received the email because “skater02@gmx.at” is NOT my email account…
Crazy…
This one is from Belgium
—————————–
From: Sun Country Airlines
To:
Subject: Your Online Flight Ticket N 39421
Date: Tue, 9 Sep 2008 12:02:17 +0100
Hello,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: wilmotte@edpnet.be
Your password: pass8ZVK
Your credit card has been charged for $629.12.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Sun Country Airlines
Attachment converted: MiniMac HD:eTicket_K2.zip (pZIP/«IC») (000CC9F6)
Same, this time from American Airlines and I’m from Quebec, Canada:
Your Online Flight Ticket N 11086
Mardi 9 Septembre 2008 15h19mn 47s
De: “American Airlines”
À: nationaldequebec@yahoo.fr
Mail avec pièce jointeeTicket_K2.zip (19 ko)
Good afternoon,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: nationaldequebec@yahoo.fr
Your password: passM3HB
Your credit card has been charged for $625.69.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
American Airlines
—– Original Message —–
From: “Delta Air Lines”
To:
Sent: Wednesday, October 08, 2008 12:52 PM
Subject: Your Online Flight Ticket N 66846
> Hello,
> Thank you for using our new service “Buy flight ticket Online” on our website.
> Your account has been created:
>
> Your login: hkirke@aerolineasargentinas.co.uk
> Your password: PASS6TUH
>
> Your credit card has been charged for $924.58.
> We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
> Attached to this message is the purchase Invoice and the airplane ticket.
> To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
>
> Kind regards,
> Delta Air Lines
>
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: schmid@aol.com
Your password: PASSX7HU
Your credit card has been charged for $941.28.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Southwest Airlines
Received today 14/10/08
______________________________
Hello,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: lonsdale@xxx.com.au
Your password: PASS9EMF
Your credit card has been charged for $994.25.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Frontier Airlines
——————————————————————————–
This part of mail could not be checked for viruses:
MIME type: application/zip
File name: E-ticket.zip
File size: 44.48 kB
Error: Warning: Hidden extension .exe
Antivirus: Grisoft AVG Email Server Edition
I have just recieved this message apparently from Spirit Airlines. I live in Perth, Australia.
Dear Gentlemen,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: craigskelton@aapt.net.au
Your password: PASSYXR7
Your credit card has been charged for $955.28.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Spirit Airlines
Obviously a complete scam.
Hi,
I live in Canada here is the email i just received, i opened the zip file…eeek…now what?:
Hello,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: triciad8@aol.com
Your password: PASSXKLI
Your credit card has been charged for $919.47.
We would like to remind you that whenever you order tickets on our website you
get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take
off for the journey!
Kind regards,
Virgin America
Your Online Flight Ticket N 40293
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: 22joe@bramwellsmith.com
Your password: PASSYS66
Your credit card has been charged for $976.32.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
United Airlines
Dear customers,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: xxxxx@xxxxxx.net.au
Your password: PASSO31F
Your credit card has been charged for $914.37.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Hawaiian Airlines
Scanned by the NetBox from NetBox Blue
(http://netboxblue.com/)
Scam has reached Oz using Alaska Airlines.
Using Alaska Airlines is a bit Doh! in Oz
—–Original Message—–
From: USA3000 Airlines [mailto:teo@qec.net.au]
Sent: Tuesday, October 14, 2008 4:53 PM
To: blackey@for-bos.com
Subject: Your Online Flight Ticket N 28717
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: blackey@for-bos.com
Your password: PASS0F5Z
Your credit card has been charged for $967.91.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
USA3000 Airlines
*******************
Contained a Zip file called “E-Ticket.zip”
It is now making the rounds here in Canada. It was redone to ‘United Airlines’. Spelling and grammer is somewhat better, but, it still has the E-ticket executable attached.
I’m from Portugal and I received a e-mail from Hawiian Airlines with a flight ticket number and a message saying that my credit card was charged in 997.37 dolars. I didn’t open the attachement.
I got an E-mail, too.
From: AirTran Airways
Subject: Your Online Flight Ticket N 50262
Dear customers,
Thank you for using our new service “Buy airplane ticket Online” on our website.
Your account has been created:
Your login: bill@wmgirard.com
Your password: PASSN9C1
Your credit card has been charged for $961.86.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
AirTran Airways
We had also just booked a flight.
I didn’t open the attachment, as our flight was with Northwest and the E-mail (supposedly) came from AirTran.
I received the same email yesterday Oct.14th with the message with the mention from Southwest Airlines with E-ticket.zip attached.
Fortunately, I did not open it. I am in Canada.
Example of letter received today:
Good day,
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: petals3@optusnet.com.au
Your password: PASSU69C
Your credit card has been charged for $904.78.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Delta Air Lines
OH…ps….I am in Australia
Great. I did purchase tickets online and I was waiting for an itinerary and my boyfriend opened this e-mail on his laptop thinking that it was legit. No spelling errors and grammar was just fine. Virus protector did not catch it. Now the computer won’t boot in safe mode and when it does recognize the battery it has reverted to 8 bit color. So, Mike the Bot Killer, what can we do now, aside from throwing the laptop through the window?
Where are you getting those great prices? Alaska Air “charged” my CC $955.59!!!
Dear Valued Customer
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login: *****
Your password: *****
Your credit card has been charged for $431.30.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Northwest Airlines
It is still doing the rounds. I just recieved it today here in England. Lucky I decided to check before opening anything.
It has also hit Scotland, please see attached email!!
—– Original Message —–
From: “Frontier Airlines”
To:
Sent: Thursday, November 13, 2008 10:49 AM
Subject: Your airplane ticket
Good evening
Thank you for using our new service “Buy flight ticket Online” on our website.
Your account has been created:
Your login:
Your password: PASSC5Y3
Your credit card has been charged for $415.35.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the flight ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Frontier Airlines
Here is another one guys, this time from USA3000 (an airline I never heard of before this). Obviously I didn’t make this account, because that is not my email address and never has been.
Dear customers,
We appreciate deeply your decision to get our new service - “Purchase your airplane ticket On-line” on our website.
You have just created your account:
Login: breathesy1@yahoo.com
Password: PASSC77R
Your credit card has been charged for $852.25.
We are glad to inform you that each time you are getting airplane tickets with the help of our site you are given a reduction of 15%!
In the ZIP archive added to this letter you can find purchase Invoice and your airplane ticket. So just colour print the ticket and start your wonderful journey!
Good luck,
USA3000 Airlines
Well it has reached the Netherlands now. I received this mail on behalf of United Airlines.
It spreads guys.
Hello!
Thank you for using our new service “Buy Northwest Airlines ticket Online” on our website. Your account has been created:
Your login: **********
Your password: pass0TI1
Your credit card has been charged for $492.30. We would like to remind you that whenever you order tickets on our website you get a discount of 10%!Attached to this message is the purchase Invoice and the Northwest Airlines ticket. To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Rose Knight
Northwest Airlines
Still circulating in Scotland - glad I googled it to check & deleted it immediately - thanks guys C
I live in South Wales, UK and have today received this email:
Thank you for using our new service “United Airlines ticket Online” on our website.
Your account has been created:
Your login: andytgj@yahoo.co.uk
Your password: passS8O4
Your credit card has been charged for $942.19.
We would like to remind you that whenever you order tickets on our website you get a discount of 3%!
Attached to this message is the purchase Invoice and the United Airlines ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Cherry Keller
United Airlines
*** ABOUT UNITED ***
United Airlines (NASDAQ: UAUA) operates nearly 3,000* flights a day on United and United Express to more than 200 U.S. domestic and international destinations from its hubs in Los Angeles, San Francisco, Denver, Chicago and Washington, D.C. With key global air rights in the Asia-Pacific region, Europe and Latin America, United is one of the largest international carriers based in the United States.
United also is a founding member of Star Alliance, which provides connections for our customers to 975 destinations in 162 countries worldwide. United’s 52,000 employees reside in every U.S. state and in many countries around the world. News releases and other information about United can be found at the company’s Web site at united.com.
I got one claiming to be from United Airlines. Rather than the usual dubious email address in the sender linie this one did actually say
From: United Airlines
I checked the sender and after seeind it was a valid address for United Airlines I opened it after checking the file with Mcafee.
Unfortunately I realised too late it was a scam and it proceeded to infect my system. 19 different malwares were detected on my system after I scanned it. Can’t remember the names.
Just had Ebay on telling me someone sent unathorised emails from my account to other members and about $170.00 has gone from my paypal account which they are investigating.
So I have had to change all my passwords and contacted all my credit/debit cards which have been used online since to cancel and reissue with new account numbers. Unfortunately I am too well bred to say my thoughts on the scum who make these.
Thank you for using our new service “Lufthansa ticket Online” on our website.
Your account has been created:
Your login: diegosaint_med_lab200@yahoo.es
Your password: passTB51
Your credit card has been charged for $559.45.
We would like to remind you that whenever you order tickets on our website you get a discount of 3%!
Attached to this message is the purchase Invoice and the Lufthansa ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Adolfo Wheeler
Lufthansa
Leave a Comment