New Phishing Scam Exploits Delta Airlines

deltaDelta Airlines has found itself the victim of a new phishing scam. Thousands of emails made to look like a ticket purchase confirmation are hitting inboxes across the web. The emails include an attachment that claims to be a Passenger Itinerary Receipt. Those who opened it had a Trojan installed on their computers. Researchers say this particular piece of malware is especially dangerous because it is not picked up buy any of the major anti-virus programs.

The airline was a victim of another recent phishing scam that tried to trick people into thinking their credit card had been charged for an expensive flight. It prompted them to download a zip file which contained a Trojan called W32/Trojan2.FXRO, a banking Trojan designed to steal personal information such as online banking info and credit card numbers.

As of yesterday over 3,000 of these malicious messages had been detected and that number is expected to rise. Delta says they have found no evidence of any data breaches on their end and that the scammers behind the attack are simply randomly targeting people rather than using stolen customer information from the airline itself.

Written by Sue Walsh

0 Comments

  1. Fred G · March 27, 2009

    There’s also a dangerous DHL email that has an attachment for confirmation of a package. Do not click on it!

  2. Michelle A · October 4, 2012

    This website from Delta was posted back in 2009, but I received one of these e-mails today (10/3/12) and freaked out because it said charged my cc. Thank goodness my computer denied me to open the attachment. I went on Delta airlines to type in confirmation number, that too was an invalid number. So I thought I should pass this on

  3. Michelle A · October 4, 2012

    I received one of these e-mails today and of course freaked me out because it said charged my cc. Thank goodness my computer denied me to open the attachment. I also went on Delta Airlines to type in the eticket number, that was an invalid number. So thought I should pass this on, and thankyou All Spammed Up for the above info.

  4. Julia P. · October 5, 2012

    I also received the email today. their “from” address was support378@delta.com. I forwarded it to my servers’ phishing info site, and deleted the email.

Leave A Reply