Amazon scammer creates macro malware in Google Docs!

Scammer’s Website or Email: https://script.google.com/macros/s/AKfycbxCwtZRrH4YNy9SjizzWkdnAJBX3tczw8U2OHfurN-UN17iCcL24VwtT6UfSI2GjEg2Lw/exec?sl=J1oRHaF&dn=acrabulparap&t=moc&s=caen&sec=ns&
Additional information about this scam: Sent from email:
From: [email protected] (Google Docs) [email protected]
Subject: Client Matthew Wang - id# 1670376325
Body: [email protected] ([email protected]) mentioned you in a comment in the following document


18x18Client Matthew Wang - id# 1670376325

You do not have commenting rights to Client Matthew Wang - id# 1670376325 .

18pxx18px ## 1 comment

32x32 ### [email protected]

• 5:25 PM, Dec 6 (PST)

New

Hi Matthew,

As a registered customer, we tried to get a hold of you through email.

Last week you automatically entered in our contest by clicking on one of our advertisements. It may have been lost in the stress of the past few months, but you still have the right to be rewarded for your participation. Simply use the contest identification number 1670376325 to check your current status.

Once your reward and credentials have been approved, our online prize system will give you an immediate confirmation.

Secure your gift by clicking here https://script.google.com/macros/s/AKfycbxCwtZRrH4YNy9SjizzWkdnAJBX3tczw8U2OHfurN-UN17iCcL24VwtT6UfSI2GjEg2Lw/exec?sl=J1oRHaF&dn=acrabulparap&t=moc&s=caen&sec=ns&

Nominated Winners :

  • Liam Bailey

  • Matthew Wang

  • Tristan Aceron

  • David Rogers

  • Piper Davidson

  • Katie Glen

  • Vienna Zimmer

View > https://script.google.com/macros/s/AKfycbxCwtZRrH4YNy9SjizzWkdnAJBX3tczw8U2OHfurN-UN17iCcL24VwtT6UfSI2GjEg2Lw/exec?sl=J1oRHaF&dn=acrabulparap&t=moc&s=caen&sec=ns&

Kind Regards,

Ashton Burton
Amazon Online Service Team

@[email protected]

Open

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

You have received this email because you are mentioned in this thread by [email protected] ([email protected]). If you don’t want to receive files from this person, block the sender from Drive. Change what Google sends you. You cannot reply to this email. 96pxx40px

1 Like

UPDATE:
Not a malware. Fake “I’m not a robot”


Link leads to http://paraplubarca.com/J1oRHaF
Which redirects to https://letstrakallconv.com/go/ca/amazonwinners/index.html?session=4d529b5a231723a4f173378c56f3c00e&fluxf=1709205334549274628&fluxffn=1711756901509001468&ffdomain=letstrakallconv.com&fname=Matthew&lname=Wang&city=Vancouver
And finally https://thisservermustbeprime.com/ca/amazonwinners/index.html?session=4d529b5a231723a4f173378c56f3c00e&fluxf=1709205334549274628&fluxffn=1711756901509001468&ffdomain=letstrakallconv.com&fname=Matthew&lname=Wang&city=Vancouver

1 Like