Date: Thu, 8 Aug 2013 21:54:14 +0400 [13:54:14 EDT]The email looks pretty convincing:
From: "TigerDirect.com" [firstname.lastname@example.org]
Subject: Your TigerDirect.com Order I9179488 Shipment Update
ComputersComputer PartsElectronicsTV & VideoCameras & SurveillanceCell Phones
Your order shipped on 08/07/2013 and is on its way to you. Click here to log in to MY ACCOUNT for the latest information on your order.
Below, you’ll find a recap of the shipped item(s):
(Note: Tracking information may not be available immediately; it may take up to 1 full business day for packages that have reached the shipper to have activity associated with the tracking number. Shipping confirmations for USPS and international shipments as well as for some special order items will not include a tracking number.)
Lenovo H718 Desktop PC - 2nd Gen. Intel Core i3-1130 3.2GHz, 4GB DDR3, 500GB HDD, DVDRW, Windows 8 64-bit, Keyboard & Mouse, (65412680) (T56-C5300 )
(Click Image Above To Track Your Order) Allow 24 hours for the tracking # to appear in the Shippers' System.
Manufacturer Tech Support: 1-877-453-6686
Manufacturer Tech URL: www.lenovo.com
Again, for the latest information on your order, please click here to log in to MY ACCOUNT. You can also view your Order History, get Invoice Copies, Return Authorizations, add Product Reviews and much more.
Customer Care Team
CHECK OUT THE LATEST DEALS - CLICK HERE
2864 N Bell Rd
Pasadena, SC 72936
Your shipping method varies. Please view the chart below for approximate transit times.
Truck Delivery: 7 - 10 Business Days
EconoShip Delivery: 4 - 9 Business Days
UPS Ground: 2 - 7 Business Days
UPS Second Day: 2 Business Days
UPS Next Day Air: 1 Business Day
US Postal Service: 2-3 Business Day Including Saturdays
Saturdays, Sundays and holidays do not count toward the estimated transit days. Packages that leave our fulfillment center on Saturdays, Sundays or holidays will not actually reach the shipper until Monday or the next business day.
Should you have any additional questions regarding your order, please feel free to visit our customer help pages at http://www.tigerdirect.com/help/.
Should you need to exchange or return a product, please visit http://www.tigerdirect.com/sectors/help/return.asp
Other Items to Consider
Home Theater Week
Search over 100,000 Products in Stock...
Deal Alerts via
Sign up for RSS
TigerDirect.com is not responsible for typographical errors or omissions. This email was sent to email@example.com in response to Order # I9179488.
Call Center Hours of Operation: Mon - Fri: 7am til 1am ET and Sat - Sun: 8am til Midnight ET
For Merchandise Returns: c/o TigerDirect Warehouse - 175 Ambassador Drive, Naperville, IL 60540
Copyright © 2013 - TigerDirect, Inc. 7795 West Flagler Street, Suite 35, Miami, FL 33144 (Corporate Headquarters: No Returns Accepted)
Clicking on the links in the email takes you to a legitimate hacked site and then on to a malware landing page at [donotclick]www.tigerdirect.com.secure.orderlogin.asp.palmer-ford.net/news/tiger-direct.php (report here) which contains an exploit kit.
Although it looks a bit like the link is actually on the tigerdirect.com site, it is actually hosted on the recently registered domain palmer-ford.net which has characteristically fake WHOIS details that mark it out as belonging to the Amerika gang.
Administrative Contact, Technical Contact:
Mills, Lawrence firstname.lastname@example.org
5700 Arlington Ave
Bronx, NY 10471
The malware domain is hosted on the following IPs along with some other malicious domains:
18.104.22.168 (Mobitel EAD, Bulgaria)
22.214.171.124 (Interserver Inc, US)
126.96.36.199 (Webnx Inc, US)