Security threat or Cyber Scam?

[X@nder36]

Hey all, my mom got a fishy email today and was wondering for some feedback. Not sure whether its some kind of credit card scam or a potential virus. Below is a copy of the email that was send to her. When we got the email, we knew we didn't place the order, so I'm wondering if someone had stolen our credit card information. The website the email said it came from seems pretty legit (although my mom's name is Lori, not LoriN), but when I clicked the "My Account" link at the bottom, it asked me to open/save a file, which really has me worried. I'm wondering if anyone had any information they could give. Thanks.


From: YesAsia.com

To: Lorin M. Hiznay

Sent: Saturday, September 03, 2011 11:56 AM

Subject: Your Order (447041989) has been successfully placed




Dear Lorin M. Hiznay,

Thank you for shopping with YesAsia.com, the No.1 Online Asian Entertainment Store. Your order (Number: 447041987) has been successfully placed. We will process and dispatch your order to you as soon as possible.

To view details of your order go to : http://www.yesasia.com/global/en/secure/ordertracking.html?order=47041987
Username: Lorin M. Hiznay
Order Number: 447041989
Payment Method: Credit Card
Shipping Method: Express
Number of Suggested Shipment(s): 1

Item Description

Catalog No.

Quantity

Unit Price (USD)

Total (USD)



Logitech QuickCam Ultra Vision

1004715754

1

207.99

207.99



Freecom Hard Drive 3.5" External Hard Drive 500GB

1004777221

1

229.99

229.99



Sub-total: USD 437.98

Tax: USD 0.00

Shipping (Express): USD 45.49

Order Total: USD 483.47

Once your payment has been received and verified your payment, your order will be processed. The estimated availability information shown during checkout will only apply after your payment has been verified.
This order confirmation has been automatically generated by our order tracking system.
Should you have any questions about your order, please visit the following website for updated order information details at "My Account". [<--Download link]

Thank you for shopping at YesAsia.com, , and please come again!

Yours sincerely,
Customer Service Department
YesAsia.com

 

[Belexandor]

No legit merchant site would automatically initiate a download for you. It might just be ad-ware or something else relatively harmless but don't take the chance. Delete the file and blacklist both the web address and the email sender.

 

[eobard]

Deal with it from the other end. Contact the credit card company (all of the ones that your mother has) and see if there are any charges for the amounts listed and/or dealing with YesAsia.com. If so then tell them the payments are fraudulent and get them to send her new credit cards. You might also want to poke around google for combo phrases like "YesAsia.com scam" or "YesAsia.com virus".

 

[grubbster]

academic: I doubt it is legit in that even if someone did steal a CC# they would probably not use the correct email address to send a confirmation to.
practical: Nuke the email and check with the CC company to see if any charges were placed on the card. If no charges are there it was bogus.

 

[X@nder36]

Yeah, my first response was to check all the cards, and she said they were all alright. Guess it was just a stupid scare. Emails these days...