{"id":18420,"date":"2022-03-03T07:10:10","date_gmt":"2022-03-03T15:10:10","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2022\/03\/03\/news-12153\/"},"modified":"2022-03-03T07:10:10","modified_gmt":"2022-03-03T15:10:10","slug":"news-12153","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2022\/03\/03\/news-12153\/","title":{"rendered":"Don&#8217;t fall for the &#8220;Donate to help children in Ukraine&#8221; scam"},"content":{"rendered":"<p><strong>Credit to Author: Jovi Umawing| Date: Thu, 03 Mar 2022 15:02:41 +0000<\/strong><\/p>\n<p>Earlier this week, we spotted <a href=\"https:\/\/blog.malwarebytes.com\/scams\/2022\/03\/unusual-sign-in-activity-mail-goes-phishing-for-microsoft-account-holders\/\">a Microsoft sign-in phish<\/a> that appeared to be taking advantage of the Ukraine crisis in order to scam people. The email warned of unauthorized log in attempts to the recipient&#8217;s account, and the location of those attempts was listed as &#8220;Russia\/Moscow&#8221;. We probably won&#8217;t ever know whether this campaign is definitely inspired by current events, but one thing is for sure, the latest spam campaign we&#8217;ve seen recently is.<\/p>\n<p>In this latest spam mail, which allegedly originates from <code>@president.gov.ua<\/code>, which is clearly a spoofed domain.<\/p>\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" data-attachment-id=\"54861\" data-permalink=\"https:\/\/blog.malwarebytes.com\/scams\/2022\/03\/dont-fall-for-the-donate-to-help-children-in-ukraine-scam\/attachment\/spam-mail\/\" data-orig-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2022\/03\/spam-mail.png\" data-orig-size=\"831,572\" data-comments-opened=\"0\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"spam-mail\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2022\/03\/spam-mail-300x206.png\" data-large-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2022\/03\/spam-mail-600x413.png\" loading=\"lazy\" width=\"600\" height=\"413\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2022\/03\/spam-mail-600x413.png\" alt=\"\" class=\"wp-image-54861\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2022\/03\/spam-mail-600x413.png 600w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2022\/03\/spam-mail-300x206.png 300w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2022\/03\/spam-mail.png 831w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><figcaption>The very timely spam asking recipients to help war refugees by donating using nontraditional ways of paying.<br \/>(Source: Stefan Dasic | Malwarebytes)<\/figcaption><\/figure>\n<\/div>\n<p>The header image looked like a stretched Ukraine flag, suggesting it was not professionally made. The text below it reads:<\/p>\n<blockquote class=\"wp-block-quote\">\n<p>A donation campaign has been launched to support Ukraine and also help refugees fleeing the conflict area in Ukraine<\/p>\n<p>The campaign, organized by the humanitarian organization Act of Peace, is hoping to raise $9,000,000 to support refugees in the region.<\/p>\n<p>Stand with the people of Ukraine. Now accepting cryptocurrency donations. Bitcoin, Ethereum, USDT and NFT.<\/p>\n<\/blockquote>\n<p>USDT is Tether, a kind of cryptocurrency. It&#8217;s interesting to note that they accept NFTs as &#8220;donation&#8221;.<\/p>\n<p>There are no misspellings, which is seen as a classic red flag in scam mails. Act of Peace is also a legitimate humanitarian organization based in Australia, and it does have <a href=\"https:\/\/actforpeace.org.au\/ukraine\/?utm_campaign=EM22-MAR-UKR-WEB44&amp;utm_source=afpweb&amp;utm_medium=web\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">an exclusive donations page for the Ukraine crisis<\/a>. What it probably <em>doesn&#8217;t<\/em> have is access to an email server it can use to send donation emails on behalf of the official website of the President of Ukraine.<\/p>\n<h2>Stay vigilant<\/h2>\n<p>If you really want to finance humanitarian aid to help Ukrainian refugees, here is <a href=\"https:\/\/twitter.com\/JaneLytv\/status\/1495926609194500104\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">a helpful Twitter thread of verified organizations<\/a> put together by Ukrainians themselves that you can check out.<\/p>\n<p>Remain vigilant. The last thing you want is to hand over your hard-earned money to help the hurting only for it to end up inside scammers&#8217; pockets.<\/p>\n<p>Stay safe!<\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/scams\/2022\/03\/dont-fall-for-the-donate-to-help-children-in-ukraine-scam\/\">Don&#8217;t fall for the &#8220;Donate to help children in Ukraine&#8221; scam<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/scams\/2022\/03\/dont-fall-for-the-donate-to-help-children-in-ukraine-scam\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Jovi Umawing| Date: Thu, 03 Mar 2022 15:02:41 +0000<\/strong><\/p>\n<p>A spam email making the rounds encourages recipients to donate for Ukraine&#8217;s children and refugees. But they want your cryptocurrency and, bizarrely, NFTs.<\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/scams\/2022\/03\/dont-fall-for-the-donate-to-help-children-in-ukraine-scam\/\">Don&#8217;t fall for the &#8220;Donate to help children in Ukraine&#8221; scam<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[25211,25212,11052,24189,25213,10574],"class_list":["post-18420","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-donate-to-help-children-in-ukraine-scam","tag-act-of-peace","tag-cryptocurrency","tag-email-scam","tag-russia-ukraine","tag-scams"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/18420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=18420"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/18420\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=18420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=18420"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=18420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}