The e-mail has a false return address of
operations@bbb.org and a phishing hyperlink citing a BBB complaint case number, for example, "DOCUMENTS FOR CASE #263621205". These links actually direct access to a subdirectory of the hacked firm's website where users are asked to download documents related to the complaint. The download is actually an executable file that is believed to be some form of a computer virus.
From:
operations@bbb.org [mailto

perations@bbb.org]
Sent: Tuesday, February 13, 2007 6:06 AM
To: XXXX
Subject: BBB Case #263621205 - Complaint for XXXX
Dear Mr./Mrs. XXXX
You have received a complaint in regards to your business services. The complaint was filled by Mr. XXXX on 02/05/2007/
Use the link below to view the complaint details:
DOCUMENTS FOR CASE #263621205
Complaint Case Number: 263621205
Complaint Made by Consumer Mr. XXXX
Complaint Registered Against: Company XXXX
Date: 02/05/2007
Instructions on how to resolve this complaint as well as a copy of the original complaint can be obtained using the link below:
DOCUMENTS FOR CASE #263621205
Disputes involving consumer products and/or services may be arbitrated. Unless they directly relate to the contract that is the basis of this dispute, the following claims will be considered for arbitration only if all parties agree in writing that the arbitrator may consider them:
- Claims based on product liability;
- Claims for personal injuries;
- Claims that have been resolved by a previous court action, arbitration, or written agreement between the parties.
The decision as to whether your dispute or any part of it can be arbitrated rests solely with the BBB.
The BBB offers its members a binding arbitration service for disputes involving marketplace transactions. Arbitration is a convenient, civilized way to settle disputes quickly and fairly, without the costs associated with other legal options.