Users are tricked into clicking on a link that points to a malicious website

Oct 27, 2012 10:47 GMT  ·  By

Have you ordered any airplane tickets from NY Airlines? You probably haven’t, since such an airline company doesn’t seem to exist. However, that doesn’t mean you will not receive any ticket purchase confirmation emails from them.

Experts from GFI Labs have come across some malicious notifications entitled “Your Flight Order AL [13121312]” which appear to be sent by one LAKENDRA Abel of NY Airlines.

The emails look like this:

“Dear Customer,

FLIGHT NUMBER I 1594639 DATE & TIME / DEC 24, 2012, 11:18 PM ARRIVING: NEW YORK JFK TOTAL PRICE : 945.64 USD

Please download and print out your ticket here: DOWNLOAD”

The download button leads to one of many compromised websites that have been set up to serve a piece of malware.

I advise you to be cautious when receiving shady ticket confirmations and remember that they don’t necessarily come from made-up companies.