Don't think this is from IBILL!
 

Got the following e-mail today, am sure it's from some dimwit as the reply to address is
[email protected], and it asks for un password and account owners last name.

Grrrrr, thought I would post it incase any other ibill account owners get sent it.
Pretty sure return and from e-mail was forged
but I am no expert.

Return-Path: <[email protected]>
Delivered-To: filter-sexpositionsguide.com-affiliatemanager@sexpositionsguide.com
Received: (qmail 74619 invoked from network); 9 Nov 2001 22:11:09 -0000
Received: from ns1.ascend.net (HELO mail.innerhost.com) (208.238.102.48)
by mail.bluegravity.com with SMTP; 9 Nov 2001 22:11:09 -0000
Received: from www34 (unverified [208.238.102.38]) by mail.innerhost.com
(Rockliffe SMTPRA 2.1.7) with SMTP id <[email protected]> for <[email protected]>;
Fri, 09 Nov 2001 17:11:02 -0500
Message-ID: <[email protected]>
From: "[email protected]" <[email protected]>
To: "[email protected]" <[email protected]>
X-Priority: 1
Priority: urgent
Date: Fri, 09 Nov 2001 22:11:05 (GMT)
Subject: URGENT INFORMATION FROM iBill.com
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Greetings from iBill.com!


We are proud to announce that we will be expanding iBill.com worldwide
within the next few months.
In order for us to do this, all existing iBill.com merchants who signed up
before the date of September 2001 must register with your regional time
zone.
This registration will only take 20 seconds at the most and is absolutely
free. If you have recieved this email then you must register within 48 hours.

Please follow these simple instructions below to register:

1. Send a confirmation email to your assigned regional time zone.([email protected])
2. In this email you will need to include your iBill.com merchant account password and
username with the last name of the account holder for verification purposes.
3. Read over your account registration confirmation which you should recieve
within 48 hours.

----------------------------------------------------------------

All products, features, and policies are subject to change. Be sure to login

to
your iBill.com merchant account on a regular basis to view the "Policy Updates"

page which
can be found in the "What's New" box.

Please do not reply

to this e-mail. Mail sent to this address
cannot be answered. For assistance,

login to your iBill.com merchant
account and choose the "Help" link in the footer of

any page.

anyone who want to give all their money away need to follow the direction on an e-mail likt that. Personaly I would
1) reply to the e-mail with a bogus user pass account number
2) contact Ibill and send them a copy of the e-mail including the headers and the reply e-mail you sent
then whey they try to login to ibill they can deal with them
Brian

------------------
If I was a real Adult webmaster I would be getting more then 100 hits a day

Obviously fake.

IBILL uses [email protected] when informing their clients about new features.

------------------
High quality Co-location and bandwidth services from The Netherlands

Interesting that it came from [email protected], we just had [email protected] signup for our site 16 different times in a matter of minutes all with the same credit card. He used our backup biller and I was surprised to see that they allowed that to happen. Wonder if the email addy is just a coincidence or if there is a connection....hmmmm

bullshit scam. i've seen something similar before. did you pass this along to [email protected]?

just got this from ibill:

Attention: Important Security Information

If you ever receive an email or other written request asking for CMI user and password or any other personal information do not
respond, email [email protected] or call iBill support at (954) 726-3868 or (800) 764-4266 to verify the request. Any and all
updates or requests for information will be posted in the password protected area of CMI.

Thank You for using iBill

Yeah I passed the entire message including headers to [email protected].

Hopefully they can do something as I would hate to see a webmaster accidently replying and getting screwed over by this asshole.

what's the worst that could happen if they got access to cmi? issue a few refunds, add his hAck3rz friends to your password file... change a few subaccounts.... It's not like he could get the checks sent to him as this requires a written verification sent to iBill.

Is this correct?

wait, so that means i shouldn't have sent my ibill info to [email protected]?

Well personally the biggest concern I would have is that they could collect all the e-mail addresses from members who have joined.

A database full of members who pay via CC... very useful... and if they spoofed IBILLS email maybe they would do the same to the webmasters site that they got the emails from, customers would believe what was sent then.

They can also look at your full personal details, bank account deatils if you are paid via wire, details of your affiliates etc..

Cancelling recurring members accounts and issuing refunds seems a serious matter in my mind.

But that's just the way I see it....

True dat, Merlin! Chalk it up to another day in the life of wonderful iBill. It amazes me why we stay with companys like that.

no doubt. plus having someone knowing exactly how much money you make, and on exactly which sites. though you'd have to be an idiot to give out that info to anyone - even ibill staff don't fuck with master passwords...