Noticed bazaar tick marks on the junk mail claiming to be from: noreply@amazon.com. Seems even more odd the dropdown option prompts to compose email or add to contacts as if Outlook for Mac recognizes this as a correctly formatted email address.
Those are Unicode characters (from an alphabet from a foreign language probably.) This is an attempt by a scammer to look like something they’re not. You should treat this message as dangerous and stay well and clearly away from it.
There are also ways to “compose” characters, such as adding accents. I’m no expert in this. I do know there is a file that shows some lookalikes (homoglyphs) though:
Encoding URLs with these Unicode characters, аⅿаzοn results in punycode which can look like this:
http:// xn--mzn-bzc67cb/ which was generated here: Homoglyph Attack Generator and Punycode Converter
3 Likes
As @PHolder says, it is a phishing email. You can tell it from the subject line in this one, at least, the translation makes it immediately obvious.
If you actually look at the email address, as opposed to the text in the “from” field, you will probably see that it doesn’t come from Amazon at all (E.g. n’o’r’e’p’l’y’@'a’m’a’z’o’n.'c’o’m (a.user@example.org) ).
I’m always astonished that scammers will go through the trouble of setting up a phishing campaign like this but then completely bungle basic grammar. This is actually one of the better examples I’ve seen. I wonder if there are metrics out there that show the difference proof-read grammar has on such a phishing expedition.
2 Likes
The special characters mixed in with noreply@amazon.com was a dead giveaway beyond Outlook automatically moving to Junk. What still baffles me is why Outlook would provide ability to Compose Email or Add to Contacts from a malformed email address.
It may seem obvious to a human that this is a malformed email address, but that’s difficult logic to program into a computer. Those characters may look “malformed” to you, but I’m sure there are millions of people who use those characters on a daily basis.
This could be a task that machine learning software might be good at, but we’re still so bleeding edge with that stuff I’d be hesitant to implement it just yet.
As I said, it isn’t the email address, it is the sender name. Outlook generally doesn’t show the email address.