Fraud - Nordstrom's Email System Used for Crypto Scams
Basically, scammers used Nordstrom's email to trick customers into sending them cryptocurrency.
Nordstrom's email system was compromised to send out fraudulent cryptocurrency scam emails. Customers received these deceptive messages, leading some to send money. The retailer is investigating the breach and advises customers to ignore the scam.
What Happened
Recently, customers of the upscale department store chain Nordstrom were targeted by a fraudulent email campaign. Scammers exploited Nordstrom's legitimate email system to send out messages that appeared to promote a St. Patrick's Day cryptocurrency promotion. The emails promised recipients a 200% return on any cryptocurrency sent to a specified wallet address within just two hours. This urgency aimed to pressure customers into acting quickly, often overlooking warning signs.
The emails were sent from an official Nordstrom address, nordstrom@eml.nordstrom.com, which added to the deception. Many customers reported receiving these emails, some to addresses that had never been exposed online. This indicates a significant security breach within Nordstrom's email system, potentially linked to a compromise involving Okta and Salesforce.
Who's Affected
The fraudulent emails reached a segment of Nordstrom's customer base, although it remains unclear how many individuals were impacted. Some recipients fell victim to the scam, sending a total of over $5,600 in cryptocurrency to the scammer's wallet. This incident highlights the risks associated with email communications, even when they appear to come from trusted sources.
Nordstrom, a retailer with millions of customers and annual revenues exceeding $15 billion, is now facing the fallout from this incident. Customers who received the emails were understandably alarmed, especially since the messages contained glaring errors, such as misspelling the company's name as “Normstorm.”
What Data Was Exposed
While specific personal data exposure details are not fully disclosed, the incident raises concerns about the integrity of customer information held by Nordstrom. The fact that the emails were sent from an official company address suggests that the email system was compromised. This could potentially allow unauthorized access to customer data, increasing the risk of further scams or phishing attempts.
Nordstrom has since issued a warning to its customers, advising them to disregard the fraudulent emails and emphasizing that the company will never request cryptocurrency transactions. They are actively investigating the breach and taking steps to secure their systems.
What You Should Do
If you received an email from Nordstrom promoting a cryptocurrency offer, it is crucial to ignore it. Do not send any funds or disclose sensitive information. Always verify promotions by visiting the official Nordstrom website or checking their verified social media channels.
Customers should remain vigilant about suspicious emails, even from known senders. Look for signs of phishing, such as incorrect spellings or unusual requests. If in doubt, contact Nordstrom directly through official channels to confirm any offers or communications. Staying informed and cautious can help protect you from falling victim to similar scams in the future.
BleepingComputer