Metadata Consulting [dot] ca: August 2016

Wednesday, August 31, 2016

New York Times URL Shortener service using Bit.ly

Looks like the New York Times URL Shortening is now active and uses Bitly.

New York Times shortened domain is of nyti.ms

http://nyti.ms/2c71XpE

For those that don't know, the Bitly default domain name is bit.ly

http://bit.ly/2c71XpE

but this URL works as well.

So the solution seems to be an URL domain alias.

Tuesday, August 30, 2016

Phishing Email - Apple Your Recent Information

For the record a recent Apple phishing email is circulating and is here is for the record, in case it makes it past your Junk or Spam filter.

What to do? Report them mark as Phishing Email not SPAM

Report Phishing URLs at Google now as well;

If you have recievied this email take further action now by click these links

https://www.google.com/safebrowsing/report_phish/?hl=en&url=srimaruthienterprises.in

Here is the HTML view of the email

Here is the email viewed as text

Dear Customer,

We were unable to determine whether you have used this browser or device wi=
th your account before. This can happen when you sign in for the first time=
 on a new computer, phone or browser, when you use your browser's incognito=
 or private browsing mode or clear your cookies.

Your account will be locked if we cannot successfully renew your subscripti=
on.

Follow the instructions below to update and verify your information:

Login to your iTunes account here: https://appleid.apple.com <a href ="http://srimaru=
thienterprises.in/201.php">

Our commitment to protecting your privacy comes from a deep respect for our=
 customers. We know that your trust doesn't come easy. That's why we have a=
nd always will work as hard as we can to earn and keep it.

You can also update your billing information on a Mac or PC.

The iCloud Team




iCloud is a service provided by Apple. Apple ID | iCloud Support | Terms an=
d Conditions | Privacy Policy Copyright ? 2016 Apple Inc. 1 Infinite Loop, =
Cupertino CA 95014, United States. All rights reserved.

How to tell this is a Phishing email ?

Convert the email view from HTML to text, check for bad URls.
Hover over all links in email, if it's not from the CIBC.com site then forget it.
The best way is to look at message source, see below.

How to examine Email Message Source ?

Now lets look at message source

Outlook.com->Actions->View Message Source.
Gmail.com->More (down arrow to top right)->Show original.

And look for phony links.

Report Phishing Email (not as Spam)

Outlook.com->Junk (at Top)->Phishing Scam
Gmail.com->More (downarrow to top right)->Report Phishing

Report phishing at Microsoft and government agencies

http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Thursday, August 4, 2016

Phishing Email - Canadian Imperial Bank of Commerce (CIBC) Alert

Update Friday, May 05, 2017 - CIBC Account Alert! [323IH]

For the record a recent CIBC phishing email is circulating and is here is for the record, in case it makes it paste your Junk or Spam filter.

What to do? Report them mark as Phishing Email not SPAM

Report Phishing URLs at Google now as well;