Jump to content

  •  

CNers have asked about a donation box for Cloudy Nights over the years, so here you go. Donation is not required by any means, so please enjoy your stay.

Photo

Scam Alert - AP is Being Spoofed

  • Please log in to reply
9 replies to this topic

#1 KChristen

KChristen

    Vendor - Astro-Physics

  • -----
  • Vendors
  • topic starter
  • Posts: 19
  • Joined: 05 Jun 2017
  • Loc: Machesney Park, IL

Posted 30 April 2024 - 02:34 PM

Hello astro industry friends,

 

We wanted to alert all astro retailers of a potential scam.  Today we've had 3 different retailers forward an email to us that they received, purportedly from Roland Christen of Astro-Physics.  I've attached a screenshot of the email (with the retailer information blurred).

 

The email address is not Roland's, and the phone number is not our number.  Neither Roland nor anyone associated with Astro-Physics sent these messages.  We don't know what these scammers are trying to accomplish, but we care about our industry and don't want to see anyone get scammed because someone used our name.   

 

Please feel free to call us at our actual phone number - 815.282.1513 - or email me directly with any questions:  karen at astro-physics dot com.

 

Wishing you all clear skies,

Karen Christen

Astro-Physics

Attached Thumbnails

  • Astro Retailer Scam Email.jpg

Edited by KChristen, 30 April 2024 - 02:35 PM.

  • Skywatchr, turtle86, Jim Waters and 2 others like this

#2 AstroPotamus

AstroPotamus

    Viking 1

  • *****
  • Posts: 909
  • Joined: 24 Aug 2020
  • Loc: NY

Posted 30 April 2024 - 03:02 PM

Well, that sucks.



#3 Poynting

Poynting

    Viking 1

  • *****
  • Posts: 573
  • Joined: 01 Apr 2012
  • Loc: La Vernia, TX

Posted 30 April 2024 - 03:07 PM

I recognize that 210 area code, San Antonio, TX. 


  • Skywatchr likes this

#4 Xeroid

Xeroid

    Soyuz

  • *****
  • Posts: 3,566
  • Joined: 21 Sep 2013
  • Loc: USA

Posted 30 April 2024 - 03:27 PM

The poor grammar is a give away...


  • Skywatchr likes this

#5 AstroPotamus

AstroPotamus

    Viking 1

  • *****
  • Posts: 909
  • Joined: 24 Aug 2020
  • Loc: NY

Posted 30 April 2024 - 03:32 PM

210 area code is likely not where the call is being delivered, geographically.  I own an IT company that provides VoIP service (among other things) and caller ID spoofing is trivially easy.


  • Skywatchr, Poynting and RossW like this

#6 Bob Denny

Bob Denny

    ASCOM Initiative

  • -----
  • Organization
  • Posts: 1,002
  • Joined: 17 Mar 2009
  • Loc: Mesa AZ USA

Posted 30 April 2024 - 03:48 PM

If you can capture the entire original SMTP message as received by the To: addressee, including the headers, you can tell a lot. Thunderbird can save the message as an .eml file. They look with Notepad etc. There may be a chain of Received: headers that can provide a clue. 


  • Skywatchr, R Botero and Xeroid like this

#7 AstroPotamus

AstroPotamus

    Viking 1

  • *****
  • Posts: 909
  • Joined: 24 Aug 2020
  • Loc: NY

Posted 30 April 2024 - 03:56 PM

Unfortunately, it's likely going to be a wild Cygnus chase.  Email is even easier to spoof these days, and most spammers are using fake accounts anyway, so it's not worth the effort that would be put into it.



#8 turtle86

turtle86

    Mr. Coffee

  • *****
  • Posts: 7,361
  • Joined: 09 Oct 2006
  • Loc: Margaritaville

Posted 30 April 2024 - 09:42 PM

The poor grammar is a give away...

 

The phrasing sure seems a little off.  



#9 Skywatchr

Skywatchr

    Fly Me to the Moon

  • *****
  • Posts: 6,229
  • Joined: 03 Jun 2006
  • Loc: North-Central Pa.

Posted 09 May 2024 - 08:44 AM

210 area code is likely not where the call is being delivered, geographically.  I own an IT company that provides VoIP service (among other things) and caller ID spoofing is trivially easy.

Yes, this is true. I had received calls from my own spoofed number. And had people call me asking why I called them, when I obviously didn't. lol.gif

I even texted "myself" twice. rofl2.gif


  • George N likes this

#10 Dan Crowson

Dan Crowson

    Soyuz

  • *****
  • Moderators
  • Posts: 3,825
  • Joined: 08 Oct 2010
  • Loc: Dardenne Prairie, MO

Posted 09 May 2024 - 11:18 AM

These emails are fairly common. I tend to get a few a day that get through my filters. You just have to be real careful these days. With this one using a generic email address, there's little that can be done to block them since the usual email stuff (DMARC etc) won't help here.
 
I just tell people that if something looks even a little suspect, just hit delete.

Dan


  • Skywatchr likes this


CNers have asked about a donation box for Cloudy Nights over the years, so here you go. Donation is not required by any means, so please enjoy your stay.


Recent Topics






Cloudy Nights LLC
Cloudy Nights Sponsor: Astronomics