Update: 19 Dec One typical example of a scam

Transcription

1 Update: 19 Dec 2016 Our customers have notified us that they have recently received spam s which appear to come from ShipServ but actually come from non-shipserv sources and contain computer malware (a virus). One typical example of a scam Below is one example of a scam received by our customers. It is very realistic: it appears to come from ShipServ (info@shipserv.com), with a real looking Reference number and Buyer name in the subject line (we have obscured these); and with a link. However, if you hover over the link it shows ow.ly website: You should not click this link. If you do, this link will open a page that looks like a ShipServ page and will ask you to login. However, you can tell from the URL that this is not on a ShipServ domain (see the red highlighted section below) and so is bogus.

2 You should not attempt to log in as this is not a real ShipServ page and you run the risk of your login details being stolen. The real StartSupplier The login page will have your buyer s name and logo displayed. Also the Username / Customer ID will already be greyed-out and completed by us with your TradeNet ID, so you just need to enter your password. The real ShipServ Pages For the real ShipServ Pages login, the URL has a secured connection on ShipServ domain - see sample screenshot below:

3 If you are a SmartSupplier or an Integrated supplier, our genuine notifications do NOT contain links (because you manage your transactions in your SmartSupplier or own system). What ShipServ is doing We are monitoring the situation closely and are in the process of reporting the addresses sending these fake s to various independent organisations (e.g. the US Federal Trade Commission). Unfortunately, ShipServ cannot stop these spam s and we are in the same position as thousands of other companies which spammers target. Update: 22 April 2016 Please be advised that a number of spam s have been sent out today. They appear to come from info@shipserv.com but they are not from ShipServ and are malicious (unfortunately, there is no way for us to stop a malicious user cloaking their identity and copying a legitimate like this).

4 When opened, the content in the malicious also appears to come from ShipServ. It says that they (ShipServ) intends to place and order with the company. Of course, ShipServ is a platform and we do not place orders directly ourselves. These s have an attachment which contains a virus. Please delete these s from info@shipserv.com and do not open the attachment. February We have recently been informed by our suppliers and purchasers that they have been receiving spoof s with REQUEST FOR QUOTATION in the subject line. These are spam s and are NOT being sent on behalf of ShipServ but are being used to mislead the recipient about the origin and nature of the message. These fake s may look genuine but potentially contain harmful malware (a virus) which is designed to cause damage to your computer. How do I identify a genuine ShipServ ? The subject line starts with the words: New RFQ There will be no attachment There will be links in the body of the The fake The subject line has: REQUEST FOR QUOTATION There may be an attachment (in many cases an.exe file) although this could have been removed by your company mail filter No links Below is an example of the scam received by our customers, all in the same format, referencing the same message but from different fictitious companies:

5 If you think you have received a spam , do not open the attachment, delete from your inbox or alternatively, if you wish to assist ShipServ in locating the offenders, leave the untouched and forward on as an attachment to our Service Delivery Centre at support@shipserv.com, who are currently in the process of reporting these addresses to the relevant authorities and organisations.