Beware of spam emails regarding WordPress Customer Reward Program

AIOSEOP500

We are aware of a spam email that is going around regarding All in One SEO Pack from 542657735@wordpress.org.  The email starts with “You have been chosen by WordPress to take part in our Customer Reward(ing) Program” or ”

You have been chosen by WordPress community to try out our new All in One SEO Pack Pro v2.1. For further information please click on the following link where you can also find the download link http://www.wordpresscommunity.net/all-in-one-seo-pack/

WordPress Community wordpresscommunity.net”

and states that you have won a free copy of All in One SEO Pack Pro.  The emails typically come from a WordPress.org email address and include a ZIP file that has been reported to include malware.

This is a typical Phishing attack aimed at getting the recipient to open the attachment or in this case install the attached ZIP file on a WordPress site.  Do not open emails from people you don’t know.  Do not download, open or install any attachment unless you know for sure who it came from and what it contains.

In this case these emails did not originate from WordPress.org, they are spam sent by unknown senders.  The file attached to the email is not a copy of All in One SEO Pack Pro and neither WordPress.org nor Semper Fi Web Design would send unsolicited emails with attachments.  Most spam filters should pick up these emails and mark them as spam.  If your spam filter does not, then mark the email as spam and delete it.

There are also numerous websites claiming to have a free copy of All in One SEO Pack Pro to download.  The ONLY valid source to purchase and download All in One SEO Pack Pro is from our SemperPlugins.com store.

all-in-one-seo-wordpress-spam-scam

Article written by Steve Mortiboy

Steve has over 25 years of project management and service delivery experience. He started his career in defense communications before moving to the British Ministry of Defence where he worked for the British Army. For the past 15 years, Steve has worked in IT, managing large projects and enterprise clients. Recently he has worked with entrepreneurs and small businesses helping them to meet the needs of their growing client base. A recent immigrant from England, he brings some international flavor to the team.

13 responses to “Beware of spam emails regarding WordPress Customer Reward Program”

  1. LuckyFM

    Thanks for the official declaration, and we all should be aware of this PHP/Obfuscated.F potentially unwanted application

  2. SCAM: Phishing attempt for All in One SEO Pack Pro v2.1 WordPress Plugin
  3. Sabahat

    Just received this email. I thought it was odd that I could see all the emails to which this was sent, first of all, and secondly, that they were all in alphabetical order!

  4. Jesin

    I too received this email.

    The website wordpresscommunity[.]net was hosted on Yahoo! Small business but they’ve removed it now as I’d sent an abuse report for it.

    I purposely downloaded the zip file and found some code in base64 format. Digging deeper I found that the code was designed to download some more PHP code (via cURL) from another website and overwrite the index.php file (of WordPress)!!!

    That code added some obfuscated JavaScript to redirect your site to another URL :-)

  5. Stephen Thomas

    Thanks so much for the warning, I just received that email. Glad I googled it and saw this page. I wonder how many people will not check it and have their sites hacked. Scary.

  6. All in One SEO Pack Pro v2.1 SCAM | Jay Forrest's Tech Blog
  7. webcam chat room play free games no downloads no registration

    Hola! I’ve been reading your web site for a
    long time now and finally got the bravery to go ahead and give you a shout
    out from Houston Tx! Just wanted to say keep up the great job!

  8. Anthony Epes

    hey Ok say you were moronic enough to actually fall for this hack….what is the next course of action to cleanse your site(MINE!)..I fell for it.
    TIA

  9. Pankaj

    Thanks for sharing such crucial information, I have also received similar phishing on my official mail account. Is there any possible way to protect WordPress account from these phishing mails?

  10. José Guimarães (Ganhar Dinheiro Legal)

    Eu ainda não recebi esse tipo de e-mail.
    Mas vou tomar cuidado.
    Porque às vezes a oferta é tentadora e pega a gente desprevenido.

  11. IGORI

    А что делать, если я прочел Ваше предупреждение позже?
    Ниже приведенный адрес нормальный или нет?

    http://semperfiwebdesign.com/blog/all-in-one-seo-pack/beware-of-spam-emails-regarding-wordpress-customer-reward-program/

Leave a Reply