News

New Email Scam: Boss Needs iTunes Cards…NOW!

According to security firm KnowB4, the bad guys are getting creative with hybrid giftcard / CEO Fraud scams, There is a massive campaign underway where they are impersonating an executive and urgently ask for gift cards to be bought for customers. The numbers need to be emailed or texted to the boss, after they are physically bought at stores.

Never comply with request like that and always confirm using a live phone call to make sure this is not a scam.

Sometimes it’s OK to say “no” to the boss!

Here is an example of an email thread on how this scam plays out.

Notice the time stamps are the originals and from different time zones–a nice creative touch, I think.  The real names were altered for obvious reasons (so embarrassing…). In this case. John Carpenter is the C-level executive of “distracted.com” and was spoofed by the bad guys.

From: John Carpenter <[email protected]>
Sent: Thursday, September 6, 2018 11:20 AM
To: Emily Walker <[email protected]>
Subject: Respond

Let me know when you are available. There is something I need you to do.
I am going into a meeting now with limited phone calls, so just reply my email.

John Carpenter

Sent from my iPad

—————————–

Subject: RE: Respond
Date: 6 September 2018 at 21:24:35
From: Emily Walker <[email protected]>
To: John Carpenter <[email protected]>

Did you intend to send this to me?

Emily Walker
Project Manager

Sent from my iPhone

—————————–

From: John Carpenter <[email protected]>
Sent: Thursday, September 6, 2018 11:28 AM
To: Emily Walker <[email protected]>
Subject: RE: Respond

Yes Emily, can you get this done ASAP? I need some couple of gift cards.
There are some listed clients we are presenting the gift cards. How
quickly can you arrange these gift cards because i need to send them
out in less than an hour. I would provide you with the type of gift
cards and amount of each.

 

Sent from my iPad
———————

Subject: RE: Respond
Date: 6 September 2018 at 21:48:03
From: Emily Walker <[email protected]>
To: John Carpenter <[email protected]>

Can do now. I’ll put on my credit card. Send me the following:

Type
Number
Amount

Emily Walker
Project Manager

 

Sent from my iPhone
————-

From: John Carpenter <[email protected]>
Sent: Thursday, September 6, 2018 11:52 AM
To: Emily Walker <[email protected]>
Subject: RE: Respond

The type of card I need is Apple iTunes gift cards. $100 denomination,
I need $100 X 20 cards. You might not be able to get all in one store,
you can get them from different stores. When you get the cards, Scratch
out the back to reveal the card codes, and email me the codes. How soon
can you get that done? Its Urgent.

Sent from my iPad

————————–

Subject: RE: Respond
Date: 6 September 2018 at 21:55:17
From: Emily Walker <[email protected]>
To: John Carpenter <[email protected]>

I can do now. Do you want me to do online instead?

Emily Walker
Project Manager

 

Sent from my iPhone
————————-

On Sep 6, 2018, at 11:57 AM, John Carpenter <[email protected]> wrote:

I need you get physical card from the store

Sent from my iPad

—————————

Subject: Re: Respond
Date: 6 September 2018 at 22:01:32
From: Emily Walker <[email protected]>
To: John Carpenter <[email protected]>
On my way to store now. What time need by?

Sent from my iPhone

———————

On Sep 6, 2018, at 12:05 PM, John Carpenter <[email protected]> wrote:

As soon as you can. I will await codes

Sent from my iPad

————————–

Subject: Re: Respond
Date: 6 September 2018 at 22:13:37
From: Emily Walker <[email protected]>
To: John Carpenter <[email protected]>
If choice between the two do you want $15 or $25?

Sent from my iPhone

———————

On Sep 6, 2018, at 12:16 PM, John Carpenter <[email protected]> wrote:

$100

Sent from my iPad

—————-

 

Subject: Re: Respond
Date: 6 September 2018 at 22:51:58
From: Emily Walker <[email protected]>
To: John Carpenter <[email protected]>

 

Just texted you the first 11 codes. Heading to another store now. 5 and 6 limit per store.

Sent from my iPhone

————————

On Sep 6, 2018, at 12:54 PM, John Carpenter <[email protected]> wrote:

Email the codes to me

Sent from my iPad

———-

End of email thread. One hour and twenty five minutes later, the bad guys had two-thousand dollars in iTunes gift cards in their hands and Emily had charged all of them on her personal credit card. OH NOOOO!!!!

Don’t let the bad guys take you down. Be alert and always check with a phone call before making any financial decisions.

If you need help with managed IT or security services give EnhancedTECH a call at 714-970-9330 or contact us at [email protected]

• About
• Latest Posts

Samantha Keller

Director of Marketing and PR at EnhancedTECH

Samantha Keller (AKA Sam) is a published author, tech-blogger, event-planner and mother of three fabulous humans. Samantha has worked in the IT field for the last fifteen years, intertwining a freelance writing career along with technology sales, events and marketing. She began working for EnhancedTECH ten years ago after earning her Bachelor’s degree from UCLA and attending Fuller Seminary. She is a lover of kickboxing, extra-strong coffee, and Wolfpack football.Her regular blog columns feature upcoming tech trends, cybersecurity tips, and practical solutions geared towards enhancing your business through technology.

Latest posts by Samantha Keller (see all)

• Insights from DefCon 2019 - August 16, 2019
• “Unsubscribe” Phishing Scam - August 8, 2019
• New Regulations Against Spoofing Texts and Robocalls - August 2, 2019