THAILAND PASS system was HACKED and FAKE EMAILS are being sent

[SCOTT FITZGERSLD]

yes, you are reading right.

i sent few application from few different emails, and i go to each of those emails

a fake email from a fake email address, very similar to the official one.

you can see here a screen shot of that fake email.

until few days ago, there was a notification on the THAILAND PASS web site,

warning not to press anything on that email.

what i wonder is, why the police is not involved?

why those fake emails keep on coming?

this is a serious security glitch and a risk for all the personal data, including credit cards

numbers, stored on that pathetis thailand PASS site and servers.

 

 

 

[Caldera]

Thanks for the warning! Can't say I'm surprised.

[internationalism]

Its an old news from 28.01, but spoof emails are still coming. 
no, there are no credit card details required on TP. Its free. 
 

 

[SCOTT FITZGERSLD]

37 minutes ago, internationalism said:

Its an old news from 28.01, but spoof emails are still coming. 
no, there are no credit card details required on TP. Its free. 
 

 

i wrote to the support emails few times but those criminal emails keep coming !!

 

 

[Puccini]

The contact email address given by the real Thailand Pass site is testgo[at]consular.go.th

Source: https://consular.mfa.go.th/th/content/thailand-pass-faqs-2

 

Is there a way to check whether the spoof email came via the same route as the emails with which the confirmation code for the application and subsequently the Thailand Pass QR code were sent? There used to be way in Gmail by right-clicking on the three vertical dots to the right of the email's date stamp and then click on "Show original" in the context-sensitive menu that popped up, but I don't know if this still works and would tell us anything. It should really be the consular division of the MFA to report this to the cyber police and get the culprits arrested and this spam business shut down.

 

Edited February 8, 2022 by Puccini

[bluemoon58]

Fairly old news! 

[The Old Bull]

I had one come but it was three weeks too late to cause me any grief.

[ifmu]

3 hours ago, Puccini said:

The contact email address given by the real Thailand Pass site is testgo[at]consular.go.th

Source: https://consular.mfa.go.th/th/content/thailand-pass-faqs-2

 

Is there a way to check whether the spoof email came via the same route as the emails with which the confirmation code for the application and subsequently the Thailand Pass QR code were sent? There used to be way in Gmail by right-clicking on the three vertical dots to the right of the email's date stamp and then click on "Show original" in the context-sensitive menu that popped up, but I don't know if this still works and would tell us anything. It should really be the consular division of the MFA to report this to the cyber police and get the culprits arrested and this spam business shut down.

 

when i get spam or phishing emails i report them to  spamcop.net   it is free BUT

you need to copy the source info of email  that is the data you don't normally see 

in my email program i can see it all 

if u use a web based email i don't think you can see it 

or forward a copy of email to me

 

sample

if you can get this info just plug it into the page and it will track it to source     then send a complaint   usually ignored 

-YMailISG: VlCy_2wWLDvZ7HWfWy5COP0iwgQhCH.X.amEDp3oMXWMOpyY
 sjx8Ie_KykHlU_s9pEBVpLqO.uzwIpy0Xw6TOpTYZqmDglpt3FhYwkWQemvN
 2gKMAgyWsjoRy46DizCLO3sg.ab6xtT6RcV6WdVJayZolil86tcu7awelh1I
 xM3TI915xtAYIG.eXcyScZKeKjvUrBxIM2OL77G5GDhRdN.YxA9qCji5ATny
 sIQcN31McsLJxLfymT8R5qrVTlVObgS5h.tfvKrvccMaff7Jg6NjjZBabvA_
 3HgvOuzBE.tocC5XBaP7OLd3eFB3sWY92y3V2b3CbqbdyyvF9RZMsFynZQPo
 K9Am5YZ2UzLZ8QNPOL5zRggQOBGaDtwnRlAqRNzcvNZmtt1NNyMFEjzsZqpZ
 UvXFA8mAYQ5mv.KhDmHYMOZ6.Po7xLAW_s9tkqJMYQIT8bHdmEGIY17aZ6E8
 IWugm4A5JLzAcVRWOV23A9O8kN3pAdRPQf2RFQT.jIMSEjbpCVLK7PX.cUj4
 ZiFKBfhKAb1qGC2pNUni54GwFUaNgMRV4oB9zn1oMc9KS4UNfdSfr.AlSfrz
 MIPExXhE2I503cjlqNYGLi_Vg1ExplsGZAeHkhqlTIY4j1opfYTG_YuOF9Wr
 hPBqrdcg2uN5MSawqL9Khu2vT3t1XHDp4l26nO6XavWQTqQFz.6ijiToMTiv
 AQOCoBBC384ScDzIULiggUXgCEnlLdh9pf_8.Iz6wyINrH1.SBTP67OH2RCF
 RsHndkp7ULWh8.93X5xV.BnGVKwYF9JxcstG..pHtZIgzb2xPEAYBo.wwFm

 

-YMailISG: VlCy_2wWLDvZ7HWfWy5COP0iwgQhCH.X.amEDp3oMXWMOpyY
 sjx8Ie_KykHlU_s9pEBVpLqO.uzwIpy0Xw6TOpTYZqmDglpt3FhYwkWQemvN
 2gKMAgyWsjoRy46DizCLO3sg.ab6xtT6RcV6WdVJayZolil86tcu7awelh1I
 xM3TI915xtAYIG.eXcyScZKeKjvUrBxIM2OL77G5GDhRdN.YxA9qCji5ATny

 

[robertson468]

Here we go again - Thailand the hub of IT.

[ozimoron]

18 minutes ago, robertson468 said:

Here we go again - Thailand the hub of IT.

More pointless Thai bashing. It's not like the US government ever gets hacked.

[fdsa]

8 minutes ago, ozimoron said:

More pointless Thai bashing. It's not like the US government ever gets hacked.

US government gets hacked too, but at least the US government officials do not order government websites from a friend's nephew like Thai officials do. Local government websites (especially those created for foreigners) are clearly made by some school boy as as "my first website" project.

 

 

 

 

Edited February 9, 2022 by fdsa

[Puccini]

11 hours ago, ifmu said:

when i get spam or phishing emails i report them to  spamcop.net   it is free BUT

you need to copy the source info of email  that is the data you don't normally see 

in my email program i can see it all 

if u use a web based email i don't think you can see it 

or forward a copy of email to me

 

sample

if you can get this info just plug it into the page and it will track it to source     then send a complaint   usually ignored 

-YMailISG: VlCy_2wWLDvZ7HWfWy5COP0iwgQhCH.X.amEDp3oMXWMOpyY
 sjx8Ie_KykHlU_s9pEBVpLqO.uzwIpy0Xw6TOpTYZqmDglpt3FhYwkWQemvN
 2gKMAgyWsjoRy46DizCLO3sg.ab6xtT6RcV6WdVJayZolil86tcu7awelh1I
 xM3TI915xtAYIG.eXcyScZKeKjvUrBxIM2OL77G5GDhRdN.YxA9qCji5ATny
 sIQcN31McsLJxLfymT8R5qrVTlVObgS5h.tfvKrvccMaff7Jg6NjjZBabvA_
 3HgvOuzBE.tocC5XBaP7OLd3eFB3sWY92y3V2b3CbqbdyyvF9RZMsFynZQPo
 K9Am5YZ2UzLZ8QNPOL5zRggQOBGaDtwnRlAqRNzcvNZmtt1NNyMFEjzsZqpZ
 UvXFA8mAYQ5mv.KhDmHYMOZ6.Po7xLAW_s9tkqJMYQIT8bHdmEGIY17aZ6E8
 IWugm4A5JLzAcVRWOV23A9O8kN3pAdRPQf2RFQT.jIMSEjbpCVLK7PX.cUj4
 ZiFKBfhKAb1qGC2pNUni54GwFUaNgMRV4oB9zn1oMc9KS4UNfdSfr.AlSfrz
 MIPExXhE2I503cjlqNYGLi_Vg1ExplsGZAeHkhqlTIY4j1opfYTG_YuOF9Wr
 hPBqrdcg2uN5MSawqL9Khu2vT3t1XHDp4l26nO6XavWQTqQFz.6ijiToMTiv
 AQOCoBBC384ScDzIULiggUXgCEnlLdh9pf_8.Iz6wyINrH1.SBTP67OH2RCF
 RsHndkp7ULWh8.93X5xV.BnGVKwYF9JxcstG..pHtZIgzb2xPEAYBo.wwFm

 

-YMailISG: VlCy_2wWLDvZ7HWfWy5COP0iwgQhCH.X.amEDp3oMXWMOpyY
 sjx8Ie_KykHlU_s9pEBVpLqO.uzwIpy0Xw6TOpTYZqmDglpt3FhYwkWQemvN
 2gKMAgyWsjoRy46DizCLO3sg.ab6xtT6RcV6WdVJayZolil86tcu7awelh1I
 xM3TI915xtAYIG.eXcyScZKeKjvUrBxIM2OL77G5GDhRdN.YxA9qCji5ATny

 

Thank you. That's useful, but the complete full header plus the body of the message must be copied into the relevant field on spamcop.net.

 

Let's hope that many recipients of this spam mail are reporting it on spamcop.net

 

In addition, it would probably be useful to send it also to testgo[at]consular.go.th with the suggestion that they should ask the police to take action on it.

[kennw]

10 hours ago, ozimoron said:

More pointless Thai bashing. It's not like the US government ever gets hacked.

Pointless argument, two wrongs dont make it right.

[treetops]

No evidence it's been hacked.  Just as likely an employee selling on the email addresses for a few baht.