email from Hasslefree I dont understand? Possible scam?

[Gunbird]

I don't know what to make of it, I just received 2 emails from Hasslefree within 10 minutes, telling me something about coupon validation and being a monthly winner, then linking me to their webpage. Problem is, first email is adressed to me but the coupon is made out to a riseinggamesAT some or other emailadress, and the second email does have my correct emailadress.

It then tells me I won a 75 Pound purchase but have to spend 5 pounds system fee first?

Is this legit? I can't remember entering any sweepstakes and I've registerd my account years ago?

A bit worried now.....ányone can enlighten me?

[The Red Graf]

You could send them a message on Facebook? If you aren't on Facebook I can do it for you.

[DoctorPete]

Sounds like a scam to me. 

[Commander Vyper]

Contact Kev and Sal direct through the website.

[Gunbird]

Contacted them on FB but got no reply, will send them a email on their website now

[Gunbird]

I'm going over both emails with a fine tooth comb now. 1 says Hasslefree Miniatures Cheap Coupon and the other Hasslfree Miniatures 2D Coupon. Both have a link to the website, but it is listed as

Code: [Select]

http://hfminis-co-uk.thepromo.link/?email=CENSORED
Mod Edit: Do not follow the above link. Left for reference, note the difference to the regular HF website URL.

It takes me to their webpage with a pop up over it:



Scam?

[Ajsalium]

Probably.

HF's site is "hfminis.co.uk" Dots, not hyphens.

[nic-e]

Well i clicked the link and it told me the same thing, so something tells me it's just a scam, afterall if hasslefree gave everyone a £75 voucher they'd go under damned fast.

[Gunbird]

That is worrying! How did they know to target me?

[The Dozing Dragon]

Don't reply to anything on it. Definitely spam. Kev and his team will take care of it .

[Momotaro]

The website you're being sent to is promo.link - the first part of the address is merely a server name , which is why they have to use hyphens.

Definitely a scam.  Don't give them that £5 !

Geting your email address and the type of sites you visit is probably done in a tracker script or cookie - adverts these days are more active than just a simple picture with a link on it.  Many adverts on e.g eBay are very dodgy.

Us the Ghostery and AdBlock browser extensions to stop rubbish like that running on your computer.

Or user data was taken in the last breach.

[Ragnar]

I would never click on a link in a suspicious email.

[Ray Rivers]

You have something in your computer mate.

Download and run this program:

https://www.malwarebytes.org/antimalware/

Highly recommended for cleaning up any malware on your machine.

[Artemis Black]

Yeah that is 'not' from us, do not click on anything or give any details etc.

We're looking into it right now, but as it happened overnight it's unlikely we can do anything until 9am GMT when our tech guys log in etc.

The one thing I have been able to work out by myself this morning is it is not due to a database breach. Because the spam mail has spoofed our email address then we get bounced emails or out of office replies and some of the email addresses bouncing to us are not customers of ours, therefore are not email addresses that are in our database.

It's also only a handful, less than we get if we send out a newsletter. So at the moment, I have very little idea what's happened other than that is definitely not from us and we haven't been breached.

We have emails in with the newsletter company we use to see if 'they' have had a breach and are awaiting our tech guys logging in to look into it.

[Fighting15s]

I received one too. Because it was badly written and had my name in the wrong order, I just flagged it as spam. I didn't click on the link because it might automatically have downloaded malware.

I've also just gone through a vigorous anti-malware purge as a result of apparently spoofed emails from me with an iPhone signature. It turned up nothing. Because of the nature of the connectivity between some of the emails, I was wondering whether an open forum containing the email addresses of wargamers had been abused or hacked.