Amazon sends Mastercard, Google Play gift card order emails by mistake

3 tháng 10, 2023

Amazon mistakenly sent out purchase confirmation emails for Hotels.com, Google Play, and Mastercard gift cards to customers, making many worried their accounts were compromised.


The emails were sent out the night of September 30, with customers reporting receiving three separate emails from Amazon Prime for each alleged gift card purchase. However, no purchases are found in their Amazon Prime accounts.


"I just randomly received 3 gift card emails in a row (within a minute) from amazon ([store-news@amazon.com](mailto:store-news@amazon.com)) and I am really confused by this," reads a Reddit post where many Amazon customers reported receiving the emails.


News of the emails was also heavily reported on social media, with cybersecurity researcher Mike Grover (_MG_) sharing screenshots of the received emails on X.








The emails used a subject line similar to "Important information about Hotels.com gift card order" and had an email address of store-news@amazon.com.


"Thank you for purchasing Hotels.com gift cards from Amazon.com," reads the email sent to Amazon customers.

"We would like our customers to be aware of some important information relating to purchase of Hotels.com gift cards."


"There are a variety of scams in which fraudsters try to trick others into paying with gift cards from well-known brands. To learn more about some common scam attempts that may involve asking for payment using gift cards please click on the button below, or alternatively contact us now."




Mistaken gift card order confirmation email from Amazon




The 'See more information' button links to a web page on Amazon.com that explains how gift cards are commonly requested as payment in online scams.


The email headers show that they were sent using Amazon Simple Email Service (SES) and passed DKIM and SPF authentication headers, indicating that the emails were verified as coming from Amazon.


While Amazon's media contact has not responded to our queries about the emails, a support agent told BleepingComputer that they were sent to all customers in error.


Update 10/1/23 6:41 PM ET: Amazon has confirmed that the emails were sent by mistake and will be contacting all impacted customers.


n error in our email system resulted in an order confirmation email being sent to customers who did not purchase a gift card," an Amazon spokesperson told BleepingComputer.


"We have fixed this error so it won’t happen again, and are emailing these customers to inform them of the error and apologize for the inconvenience."



Source: bleepingcomputer.com


Bạn cũng có thể quan tâm

4 tháng 6, 2024
Bộ định tuyến chơi game TP-Link Archer C5400X dễ mắc phải các lỗi bảo mật có thể cho phép kẻ tấn công từ xa, không được xác thực thực thi các lệnh trên thiết bị.
3 tháng 6, 2024
Ngày 27 tháng 5 Check Point đã cảnh báo rằng các tác nhân đe dọa đang nhắm mục tiêu vào các thiết bị VPN truy cập từ xa của Check Point trong một chiến dịch đang diễn ra nhằm xâm phạm mạng doanh nghiệp.
31 tháng 5, 2024
Công ty quản lý đơn thuốc Sav-Rx cảnh báo hơn 2,8 triệu cá nhân ở Hoa Kỳ việc họ đã bị vi phạm dữ liệu và dữ liệu cá nhân của họ đã bị đánh cắp trong một cuộc tấn công mạng năm 2023.
Thêm bài viết
Share by: