F30POST
F30POST
2012-2015 BMW 3-Series and 4-Series Forum
BMW Garage BMW Meets Register Today's Posts
BMW 3-Series and 4-Series Forum (F30 / F32) | F30POST > 2012-2019 BMW 3 and 4-Series Forums > Regional Forums > UK > UK - Off Topic > NIP - or is it????
GetBMWParts
Post Reply
 
Thread Tools
      12-06-2016, 01:27 PM   #1
NorthEastX5
Lieutenant
152
Rep
403
Posts

Drives: X5 F15 3.0d M-Sport / 435i F36
Join Date: Sep 2015
Location: UK

iTrader: (0)

NIP - or is it????

Received a NIP today for doing 67 in a 30.......lock me up and throw away the key.

a few things in my defence

1. it came to my corporate email account
2. the format is very elaborate to say the least....very fancy
3. the location is a bit non specific
4. there is no mention of the vehicle registration at all, or vehicle type come to that!
5. there happens to be a nice little "button" to click......what could possibly go wrong???? clicky clicky.....
6. on the date of the alleged offence i was in Denmark, smack in middle of a 4 day business trip
7. i don't live in Manchester and was not there at all that week

i smell a phish sized rat....
Attached Images
 
Appreciate 0
      12-06-2016, 01:34 PM   #2
Tengocity
General
Tengocity's Avatar
United Kingdom
8608
Rep
19,983
Posts

Drives: 911, Cayenne Turbo, Disco 4
Join Date: Sep 2013
Location: Crieff, Perthshire, Scotland

iTrader: (0)

That's a new one on me!

You'd have to get very lucky for all the basic facts to align such that it seemed legitimate though.
__________________
Current: Porsche 911 991 C4S, Porsche Cayenne Turbo, Land Rover Discovery 4. Gone...G01 X3 M40i, Cayman S 987, F31 340i, Cayman GT4, F82 M4 CP, Lotus Exige V6, G20 330e, F30 330e, Boxster S 987, F31 335d, Mini Cooper SD, E89 Z4, E90 330d 320d, E60 520d, E46 330d 320d, MX5s, E30 325i
Appreciate 0
      12-06-2016, 01:35 PM   #3
Tengocity
General
Tengocity's Avatar
United Kingdom
8608
Rep
19,983
Posts

Drives: 911, Cayenne Turbo, Disco 4
Join Date: Sep 2013
Location: Crieff, Perthshire, Scotland

iTrader: (0)

Are they just trying to get you to click the link for photographic proof, or is part of a scam to get you to part with cash?
__________________
Current: Porsche 911 991 C4S, Porsche Cayenne Turbo, Land Rover Discovery 4. Gone...G01 X3 M40i, Cayman S 987, F31 340i, Cayman GT4, F82 M4 CP, Lotus Exige V6, G20 330e, F30 330e, Boxster S 987, F31 335d, Mini Cooper SD, E89 Z4, E90 330d 320d, E60 520d, E46 330d 320d, MX5s, E30 325i
Appreciate 0
      12-06-2016, 01:38 PM   #4
Ice Man
Captain
326
Rep
737
Posts

Drives: F36 435i M-Sport
Join Date: May 2015
Location: BSE

iTrader: (0)

Quote:
Originally Posted by Tengocity View Post
Are they just trying to get you to click the link for photographic proof, or is part of a scam to get you to part with cash?
It's all about clicking the link and malware
Appreciate 0
      12-06-2016, 01:46 PM   #5
Tengocity
General
Tengocity's Avatar
United Kingdom
8608
Rep
19,983
Posts

Drives: 911, Cayenne Turbo, Disco 4
Join Date: Sep 2013
Location: Crieff, Perthshire, Scotland

iTrader: (0)

Quote:
Originally Posted by Ice Man View Post
It's all about clicking the link and malware
I thought that after my initial post. So in that regard, if the only goal is to get someone to click the link then it's very good, as I'm pretty sure plenty would do so, even if they thought it was a scam to get people to send money.
__________________
Current: Porsche 911 991 C4S, Porsche Cayenne Turbo, Land Rover Discovery 4. Gone...G01 X3 M40i, Cayman S 987, F31 340i, Cayman GT4, F82 M4 CP, Lotus Exige V6, G20 330e, F30 330e, Boxster S 987, F31 335d, Mini Cooper SD, E89 Z4, E90 330d 320d, E60 520d, E46 330d 320d, MX5s, E30 325i
Appreciate 0
      12-06-2016, 01:47 PM   #6
Watsey
Major General
United Kingdom
7168
Rep
9,090
Posts

Drives: F31 330D sDrive M Sport
Join Date: Jun 2015
Location: On sabbatical.

iTrader: (1)

Just a matter of chance - sometimes the details will mean something to someone.

I received a phishing email from Apple Music a few weeks ago relating to an iTunes voucher (I'd recently bought one) for my godson (his name was stated in the email) and the device that he'd used to redeem it. It was VERY convincing save for one minor typo, and me calling the dad to ask if godson has an iPod Touch (no - he's got an iPad), plus (of course) how would Apple know that I'd bought him a physical voucher ?
__________________
Current : F31 330sD, remapped, Ohlins Road & Track, Millway camber plates, Quaife LSD, Stoptech brakes + Pagid RSL1 pads all round, Weichers front strut brace, Eibach front & rear anti-roll bars, Michelin MP4S.
Appreciate 0
      12-06-2016, 02:36 PM   #7
PurpleTT
Major
PurpleTT's Avatar
United Kingdom
372
Rep
1,216
Posts

Drives: 335d F30 MSport
Join Date: Sep 2013
Location: South East

iTrader: (0)

Plus
1) it states what Your Ref is, not theirs. How did they know your ref?
2) The second sentence doesn't have a capital "W"
3) The sentence in orange - would they call it photographic proof? or evidence?
4) failed to "adhere with a speed limit" surely "to". And anyway you'd say exceeded.
5) You have been "announced" ??? surely identified
6) "as driver" you mean as the driver surely

Can't be arsed to proof read this any more but either the standard adopted template that Greater Manchester Police use was written by an 11 year old whose first language isn't English, or it's balderdash.

No further questions m'lud.
__________________
M3 Azurite Black now instead of the 335d. Roughly the same really.
Appreciate 1
Quantox308.50
      12-06-2016, 02:46 PM   #8
Ice Man
Captain
326
Rep
737
Posts

Drives: F36 435i M-Sport
Join Date: May 2015
Location: BSE

iTrader: (0)

Quote:
Originally Posted by Tengocity View Post
I thought that after my initial post. So in that regard, if the only goal is to get someone to click the link then it's very good, as I'm pretty sure plenty would do so, even if they thought it was a scam to get people to send money.
Curiosity killed the cat
Appreciate 0
      12-06-2016, 02:47 PM   #9
....,,,,..,,..
General
No_Country
6651
Rep
20,651
Posts

Drives: xxxx
Join Date: Dec 2013
Location: xxxx

iTrader: (0)

OP would you mind me sending you a PM and you email me the original?

Btw never click on anything you do not know or are suspicious about.

Just clicking can be enough.

Ransomware is currently a huge problem at the moment.
Appreciate 0
      12-06-2016, 03:08 PM   #10
davyk31
Major General
1156
Rep
7,106
Posts

Drives: Macan GTS :-) & F40 M135i
Join Date: Sep 2009
Location: Northern Ireland

iTrader: (0)

Is the biggest question not how the Police know your email address from your car registration???? That should stop anyone with a brain from clicking anything silly.
Appreciate 0
      12-06-2016, 03:08 PM   #11
Kal101
Major General
Kal101's Avatar
3074
Rep
7,073
Posts

Drives: G81
Join Date: Jan 2014
Location: West mids!!!!

iTrader: (0)

Garage List
It's a scam.

There's too many grammatical errors that even I can spot.

Reckon you click on the link and they put a lock out virus on your system. But like the ukase or metropolitan police random ware.

If you want to know more click here .
__________________
Appreciate 0
      12-06-2016, 03:14 PM   #12
HelmutVisor
Banned
United Kingdom
642
Rep
817
Posts

Drives: 2016 F32 435d XDrive M Sport
Join Date: Aug 2016
Location: Somerset, UK

iTrader: (0)

I think things like that are great.

If someone is stupid enough to firstly believe it's genuine and secondly click or action it, they have demonstrated they should be flushed from the gene pool, have their car keys removed and have their bank account hoovered out by the Crown Prince of Nigeria.
Appreciate 1
      12-06-2016, 03:31 PM   #13
dopper99
Lieutenant General
3638
Rep
11,361
Posts

Drives: Hyundai Ioniq 5 N
Join Date: Jun 2011
Location: UK

iTrader: (1)

The fact your reg number is not on there. ........ they can fook right off and stick it where the sun don't shine.
__________________

Current:
Hyundai Ioniq 5 N
Previous:
Golf R Mk8, Golf R Mk7.5, Mercedes AMG C63 S Coupe, F80 M3 Competition Pack, F30 335d
Appreciate 0
      12-06-2016, 03:34 PM   #14
dopper99
Lieutenant General
3638
Rep
11,361
Posts

Drives: Hyundai Ioniq 5 N
Join Date: Jun 2011
Location: UK

iTrader: (1)

Another thing with these sorts of emails is check what email address it came from. Usually some gmail bollox account.
__________________

Current:
Hyundai Ioniq 5 N
Previous:
Golf R Mk8, Golf R Mk7.5, Mercedes AMG C63 S Coupe, F80 M3 Competition Pack, F30 335d
Appreciate 0
      12-06-2016, 03:38 PM   #15
TouringPleb
Brigadier General
4421
Rep
4,261
Posts

Drives: SRB 440i GC
Join Date: Jan 2014
Location: Cambs

iTrader: (0)

As far as I know NIPs are always posted. When you are flashed they get the registered address from the DVLA database which wouldn't have your email linked to it.
Appreciate 0
      12-06-2016, 03:51 PM   #16
PurpleTT
Major
PurpleTT's Avatar
United Kingdom
372
Rep
1,216
Posts

Drives: 335d F30 MSport
Join Date: Sep 2013
Location: South East

iTrader: (0)

So to sum up.... we're not sure.
__________________
M3 Azurite Black now instead of the 335d. Roughly the same really.
Appreciate 0
      12-06-2016, 04:36 PM   #17
philiper1
Colonel
philiper1's Avatar
England
764
Rep
2,468
Posts

Drives: F21 M135i LCI
Join Date: Jan 2014
Location: Norfolk

iTrader: (1)

Garage List
Interesting article

http://www.theboltonnews.co.uk/news/...malware_virus/

[img]http://www.theboltonnews.co.uk/resou...onsive-gallery[/img]
__________________
Current: F21 M135i Mineral Grey and few options
Previous: F30 320i XDrive, E85 2.5i, E21 323i
Appreciate 0
      12-06-2016, 04:45 PM   #18
....,,,,..,,..
General
No_Country
6651
Rep
20,651
Posts

Drives: xxxx
Join Date: Dec 2013
Location: xxxx

iTrader: (0)

Ah good they have taken down the website.

https://blogs.sophos.com/2016/12/02/...of-ransomware/

As mentioned there is a really big increase in Ransomware attacks and blackmail attacks are becoming more prominent.

Graphical but gives a representation of how active attacks are.

http://map.norsecorp.com/#/
Appreciate 0
      12-06-2016, 05:41 PM   #19
NorthEastX5
Lieutenant
152
Rep
403
Posts

Drives: X5 F15 3.0d M-Sport / 435i F36
Join Date: Sep 2015
Location: UK

iTrader: (0)

thanks for the replies....yup knew it was fake but figured you'd like to see it.

quite impressive lengths these people will go to now!!

of all the phishing emails i've received lately this is one of the better ones.

the other bit I like is the "Copyright" !!!! is GMP a trademark????
Appreciate 0
      12-07-2016, 01:47 AM   #20
Russbmw
Colonel
Russbmw's Avatar
Australia
669
Rep
2,446
Posts

Drives: 2018 630iGT sport
Join Date: Aug 2013
Location: Caloundra, Australia

iTrader: (0)

Garage List
I think we should play a game of picking out all the grammatical errors....

Apart from those mentioned above already, there's also

"EXCEED 30MPH....."

erm...that'll be "EXCEEDING" in the context of the sentence.

Next!! :
__________________
Appreciate 0
      12-07-2016, 02:36 AM   #21
Russbmw
Colonel
Russbmw's Avatar
Australia
669
Rep
2,446
Posts

Drives: 2018 630iGT sport
Join Date: Aug 2013
Location: Caloundra, Australia

iTrader: (0)

Garage List
LOL! My mate at work has just come in and said he'd received exactly the same email!
__________________
Appreciate 0
      12-07-2016, 04:16 AM   #22
....,,,,..,,..
General
No_Country
6651
Rep
20,651
Posts

Drives: xxxx
Join Date: Dec 2013
Location: xxxx

iTrader: (0)

Just remember while we are able to spot obvious things such as spelling, grammar etc, that these things can encrypt your laptop or company server.

A lot of these type of attacks have poor wording as they rely on working out country etc from IP, computer settings etc and if received in France it would auto change to be in French with a Paris gendarmes setup.

Also, they are moving away from attachments etc and using embedded .JS to do an ET and call home for the full commands.

They also make use of social engineering to target specific people in an organisation, with an email that looks like it comes from someone they know.

Another one that is increasing is hijacking laptop camera and blackmailing people.

A finance director at a friends company had this, working in HK, they accessed his laptop and took pics of him getting change, sitting in boxers etc and he received an email asking for cash (bit coins) or they would send the pics to his address book (AD all).

https://nakedsecurity.sophos.com/201...load-required/

https://www.sophos.com/en-us/mediali...wpna.pdf?la=en
Appreciate 0
Post Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -5. The time now is 06:50 AM.




f30post
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
1Addicts.com, BIMMERPOST.com, E90Post.com, F30Post.com, M3Post.com, ZPost.com, 5Post.com, 6Post.com, 7Post.com, XBimmers.com logo and trademark are properties of BIMMERPOST