RIAA

General discussion of identity theft issues, including identity theft schemes, phishing scams, and related issues.

RIAA

Postby JamesVincent » Fri Feb 17, 2012 5:01 pm

Received this email the other day in my business email account (and no the email address mentioned is not my email account).

Dear theresakremm@yahoo.com, hereby we notify you that your IP address has been identified as distributing copyrighted content. Please see the attachment to this message for illicit Internet traffic details.
Failure to respond to this message within 14 days will result in copyright infringement accusation and standard legal procedures.


Recording Industry Association of America (RIAA)
1330 Connecticut Avenue NW Suite 300
Washington, DC 20036
tel: 202-775-0101
fax: 202-775-7253



Took a quick look around Snopes and didnt see anything about it. Anybody else hear anything about this? It was not addressed to me but came to me so obviously a scam of some sort. And I dont see the RIAA sending out love letters before they have you charged with something if their that certain your pirating.
Image

"It's so heart warming when you get to see the little ones slowly tentatively move out of the nest and out in to the great big world out there, ready to get started on their very own epic fail." Notorial Dissent
User avatar
JamesVincent
A Councilor of the Kabosh
 
Posts: 2255
Joined: Sat Oct 23, 2010 8:01 am

Re: RIAA

Postby webhick » Fri Feb 17, 2012 7:52 pm

It's not legit. Last I knew, the RIAA doesn't inform you of this stuff by email. They send a cease and desist to your ISP and then your ISP threatens you on their behalf.
“He that is taught only by himself has a fool for a master.” - Hunter S. Thompson
webhick
Illuminati Obfuscation: Black Ops Div
 
Posts: 3534
Joined: Tue Jan 23, 2007 2:41 am

Re: RIAA

Postby Mr. Mephistopheles » Fri Feb 17, 2012 8:01 pm

JamesVincent wrote:Received this email the other day in my business email account (and no the email address mentioned is not my email account).

Dear theresakremm@yahoo.com, hereby we notify you that your IP address has been identified as distributing copyrighted content. Please see the attachment to this message for illicit Internet traffic details.
Failure to respond to this message within 14 days will result in copyright infringement accusation and standard legal procedures.


Recording Industry Association of America (RIAA)
1330 Connecticut Avenue NW Suite 300
Washington, DC 20036
tel: 202-775-0101
fax: 202-775-7253



Took a quick look around Snopes and didnt see anything about it. Anybody else hear anything about this? It was not addressed to me but came to me so obviously a scam of some sort. And I dont see the RIAA sending out love letters before they have you charged with something if their that certain your pirating.


'Betcha that attachment contains a Trojan.
User avatar
Mr. Mephistopheles
Faustus Quatlus
 
Posts: 798
Joined: Wed Jan 30, 2008 4:46 am

Re: RIAA

Postby Mr. Mephistopheles » Fri Feb 17, 2012 8:05 pm

webhick wrote:It's not legit. Last I knew, the RIAA doesn't inform you of this stuff by email. They send a cease and desist to your ISP and then your ISP threatens you on their behalf.


Wow, you got off lucky. The RIAA goons showed up in their black helicopters on a moonless night and put me in the dunking chair until I admitted I was distributing unauthorized copies of "Jim Dandy".
User avatar
Mr. Mephistopheles
Faustus Quatlus
 
Posts: 798
Joined: Wed Jan 30, 2008 4:46 am

Re: RIAA

Postby Torp » Sat Feb 18, 2012 6:37 am

I second the "do not reply." Here is why:

Even if you pirated material, and I'm not saying you did, the RIAA identifies you by asking your ISP (who owns block addresses) who was using your specific address during the time period they identify.

The thing is, your ISP will be able to identify your specific account and your home address.

Your ISP doesn't know (because they don't care to, yet) any webmail you use. Webmail, because it is run by another company, will necessarily have a different IP address (the multitude that Yahoo! uses) than you use.

It is absolutely impossible for your ISP to trace the ISP Yahoo! uses to your specific account.

This would be much more believable if it came to your ISP address.

Please, don't reply to this email! Don't feed the trolls!
Torp
Stowaway
 Stowaway
 
Posts: 7
Joined: Fri Jul 02, 2010 3:17 am
Location: Somewhere in Time

Re: RIAA

Postby Judge Roy Bean » Sat Feb 18, 2012 5:01 pm

JamesVincent wrote:Received this email the other day in my business email account ... It was not addressed to me but came to me so obviously a scam of some sort. And I dont see the RIAA sending out love letters before they have you charged with something if their that certain your pirating.


Actually, here's what the RIAA says:

... There continues to be paralyzing levels of illegal downloading that require a variety of approaches and the help of partners like Internet service providers (ISPs). That’s why we send copyright notices to educate and notify downloaders in advance that they are breaking the law and could face more serious consequences. ...


They (whomever sent the message) may be phishing - look carefully at the link they provided. If it is to an ISP, the original recipient of the message may actually have been identified/turned in. You can report (anonymously) on the RIAA web site:

https://www.riaa.com/reportpiracy.php?content_selector=report-piracy-online

Their normal procedure is to notify the ISP. I've never heard of them contacting someone directly.
The Honorable Judge Roy Bean
The world is a car and you're a crash-test dummy.
The Devil Makes Three
Judge Roy Bean
Judge for the District of Quatloosia
Judge for the District of Quatloosia
 
Posts: 3039
Joined: Tue May 17, 2005 7:04 pm
Location: West of the Pecos

Re: RIAA

Postby Kestrel » Sun Feb 19, 2012 3:03 am

Mr. Mephistopheles wrote:'Betcha that attachment contains a Trojan.

'Betcha you're absolutely right.

The grammar is better than most, but typical of grammar used by someone who is not a native English speaker: "hereby we notify you" "will result in copyright infringement accusation"

James, did you check the message header and look at the sender's email address domain?
"Never try to teach a pig to sing. It wastes your time and annoys the pig." - Robert Heinlein
User avatar
Kestrel
Endangerer of Stupid Species
 
Posts: 874
Joined: Sun Jun 05, 2011 9:09 pm
Location: Hovering overhead, scanning for prey

Re: RIAA

Postby JamesVincent » Sun Feb 19, 2012 3:14 am

RIAA <JustinLecea@riaa.com>
Image

"It's so heart warming when you get to see the little ones slowly tentatively move out of the nest and out in to the great big world out there, ready to get started on their very own epic fail." Notorial Dissent
User avatar
JamesVincent
A Councilor of the Kabosh
 
Posts: 2255
Joined: Sat Oct 23, 2010 8:01 am

Re: RIAA

Postby Kestrel » Sun Feb 19, 2012 3:26 am

JamesVincent wrote:RIAA <JustinLecea@riaa.com>

Still could be a fake name.

The header (source) info could give some detail. In Windows Mail I look at the header by selecting "File - Properties - Details - Message Source."
"Never try to teach a pig to sing. It wastes your time and annoys the pig." - Robert Heinlein
User avatar
Kestrel
Endangerer of Stupid Species
 
Posts: 874
Joined: Sun Jun 05, 2011 9:09 pm
Location: Hovering overhead, scanning for prey

Re: RIAA

Postby Arthur Rubin » Sun Feb 19, 2012 5:46 pm

JamesVincent wrote:RIAA <JustinLecea@riaa.com>

How about the Sender: field in the header? The Reply-To: field? Does the Received: field looks like it actually came from riaa.com?

Note, this last sometimes requires expert analysis. However, if it was inserted in the .ng domain, you're on your own. Note also that the Received: field may contain information about your E-mail addresses that you might not want to publish; if, for example your E-mail is forwarded from your stated E-mail address to an E-mail address where you actually read it, the latter is also available. Finally, publishing it here may violate our site privacy guidelines. Check with the management to be sure if you want help.

You might also see if RIAA is interested in the theft of their identify.
Last edited by Arthur Rubin on Sun Feb 19, 2012 5:50 pm, edited 1 time in total.
Reason: added: check whether RIAA is interested in the scam
Arthur Rubin, unemployed tax preparer and aerospace engineer
ImageJoin the Blue Ribbon Online Free Speech Campaign!

Butterflies are free. T-shirts are $19.95 $24.95 $29.95
Arthur Rubin
Tupa-O-Quatloosia
 
Posts: 955
Joined: Fri May 30, 2003 12:02 am
Location: Brea, CA

Re: RIAA

Postby Kestrel » Sun Feb 19, 2012 9:34 pm

James PM'd me the complete IP header. It's almost certainly a fraud. It looks like it originated from an IP address in Pakistan.

You can find out where any message came from by tracing the IP address trail at a website like http://ip-lookup.net/index.php

I looked up the X-Originating-IP: [182.182.6.162]
The ip-lookup reply was:
Lookup an IP address :
IP: 182.182.6.162
Host: ?
Country: Pakistan
"Never try to teach a pig to sing. It wastes your time and annoys the pig." - Robert Heinlein
User avatar
Kestrel
Endangerer of Stupid Species
 
Posts: 874
Joined: Sun Jun 05, 2011 9:09 pm
Location: Hovering overhead, scanning for prey


Return to Identity Theft

Who is online

Users browsing this forum: No registered users and 1 guest