Social Engineering Templates

####################################################################################################
#                                           AOL                                                    #
####################################################################################################
Dear VictimName,
We recently noticed one or more attempts to log in to your AOL account from a
foreign IP address and we have reasons to belive that your account was hijacked
by a third party without your authorization. If you recently accessed your account
while traveling, the unusual login attempts may have been initiated by you.
However, if you are the rightfull holder of the account, click on the link below,
fill the form and then submit as we try to verify your identity.

http://www.fake.com

The log in attempt was made from:
IP address: 64.12.116.8
ISP host: cache-mtc-aa04.proxy.aol.com
If you choose to ignore our request, you leave us no choice but to temporary suspend
your account. We ask that you allow at least 72 hours for the case to be investigated
and we strongly recommend not to make any changes to your account in that time. If you received this notice and you are not the authorized account holder, please be
aware that it is in violation of AOL policy to represent oneself as another AOL user.
Such action may also be in violation of local, national, and/or international law.
AOL is committed to assist law enforcement with any inquires related to attempts to
misappropriate personal information with the intent to commit fraud or theft.
Information will be provided at the request of law enforcement agencies to ensure
that perpetrators are prosecuted to the fullest extent of the law.

Thanks for your patience as we work together to protect your account.
Regards,
AOL Security Department.

*Please do not respond to this e-mail as your reply will not be received.
####################################################################################################
#                                           Ebay                                                   #
####################################################################################################
Dear VictimName,


We recently noticed on or more attempts to log in to your eBay account from a
foreign IP address and we have reasons to belive that your account has been used by a third party
without your authorization.

If you recently accessed your account from this ip address,the unusual log in attempts
may have been initiated by you.
However,please verify that you are the account holder , clicking on the link below,
fill the form and then submit information to our secure server.
In this way we will verify your identity.

http://www.fake.com

The log in attempt was made from:
IP address: 184.158.158.98
ISP host: 184.158.158.98


If you choose to ignore our request , your account will be suspended until you will verify your identity.

We ask that you allow at least 72 hours for the case to be investigated and we
strongly recommend not to make any changes to your account in that time.

If you received this notice and you are not the authorized account
holder, please be aware that it is in violation of eBay policy to represent
oneself as another eBay user. Such action may also be in violation of
local, national, and/or international law. eBay is committed to assist
law enforcement with any inquires related to attempts to misappropriate
personal information with the intent to commit fraud or theft.
Information will be provided at the request of law enforcement agencies to
ensure that perpetrators are prosecuted to the fullest extent of the law.

*Please do not respond to this e-mail as your reply will not be received.

Thanks for your patience as we work together to protect your account.


Regards,

Mark Johnson
Safeharbor Department
eBay Inc.
####################################################################################################
#                                           Gmail                                                  #
####################################################################################################
Dear VictimName,


We recently noticed on or more attempts to log in to your Gmail account from a
foreign IP address and we have reasons to belive that your account has been used by a third party
without your authorization.

If you recently accessed your account from this ip address,the unusual log in attempts
may have been initiated by you.
However,please verify that you are the account holder , clicking on the link below,
fill the form and then submit information to our secure server.
In this way we will verify your identity.

http://www.fake.com

The log in attempt was made from:
IP address: 184.158.158.98
ISP host: 184.158.158.98


If you choose to ignore our request , your account will be suspended until you will verify your identity.

We ask that you allow at least 72 hours for the case to be investigated and we
strongly recommend not to make any changes to your account in that time.

If you received this notice and you are not the authorized account
holder, please be aware that it is in violation of Gmail policy to represent
oneself as another Gmail user. Such action may also be in violation of
local, national, and/or international law. Google is committed to assist
law enforcement with any inquires related to attempts to misappropriate
personal information with the intent to commit fraud or theft.
Information will be provided at the request of law enforcement agencies to
ensure that perpetrators are prosecuted to the fullest extent of the law.

*Please do not respond to this e-mail as your reply will not be received.

Thanks for your patience as we work together to protect your account.


Regards,

Mark Johnson
Google Security Department
Google Inc.
####################################################################################################
#                               HTML       Google Apps                                             #
####################################################################################################
<html dir="ltr"><body><font face="Arial"><p>Dear VictimName,</p>

<p>Google Apps accounts are undergoing an <a href="http://www.fake.com">improvement</a>, allowing you to give users access to over 60 additional applications from Google.

We encourage you to transition your organization&rsquo;s accounts on your own schedule now.</p>

<ul>There are several advantages to transitioning on your own schedule:

<li>Make the change on your own timeline</li>

<li>Have time to try the new infrastructure with a subset of your accounts

first</li>

<li>Use automated mailing lists and email templates to pre-notify your users</li>

<li>Get access to over 60 additional applications from Google right away</l=

i></ul>

<p><strong>Start the transition today</strong> by clicking the &ldquo;Get started&rdquo; or &ldquo;Transition more users&rdquo; button in your control panel:

<br>
<a href="http://www.fake.com">http://www.google.com/apps/intl/en/business/index.html</a>

<p>We plan to fully transition your organization soon -- including all users that you have not yet transitioned yourself.

If you have not transitioned by <b>next week</b>, we&rsquo;ll complete the transition for you.</p>

<p>If you have questions about this transition, we encourage you to explore our Help Center documentation for <a href="http://www.fake.com">administrators</a> and for <a href="http://www.fake.com">end-users</a>.</p>

<p>Sincerely,

<br>

The Google Apps Team</p>

<font size="1" color="666666"><p>-------------<br>

You have received this mandatory email service announcement to update you about important changes to your Google Apps account.</p>

<p>Please don&#39;t reply to this email, as we won&#39;t be able to review your response.

You may file a case in your control panel if you need additional help.</p>

<p>Google Inc.

<br>

1600 Amphitheatre Parkway

<br>

Mountain View, CA 94043, USA</p></font></font></body></html>