Another fake email message from "Social Security"

[usonian]

If you are savvy enough to view full headers, the sender of the email I got is:
[e-mail]

NOT ssa.gov

What bullshit.

SOCIAL SECURITY ADMINISTRATION
Dear Citizen,

We are writing to inform you that your revised Social Security Statement is now available for your review. This document has been carefully redesigned to present the most crucial information about your benefits in a clear and concise manner.

IMPORTANT: Please examine the attached file thoroughly. It contains your new Social Security Statement with vital information regarding your benefits.

We strongly recommend an annual review of your Statement to verify:

The accuracy of your earnings record
Your personalized monthly retirement benefit projections
Essential information for your financial planning
Newly included fact sheets tailored to your demographic and financial situation
To access your updated Statement,open the attached file and adhere to the enclosed instructions.

Please be advised: As your Statement is now accessible online at your convenience, we will discontinue automatic mailing of physical copies.

We trust that you will find your revised Statement to be an invaluable resource for your future financial planning.

Yours sincerely,

Social Security Administration

Open attached file --- BULLSHIT.

I tossed it into a text editor and it's a whole lot of funky obfuscated javascript.
Danger, Will Robinson!

I wish that everyone could hover over the sender's address to see what it really is, or "show full headers" to expose it. Just hovering doesn't let you copy the bogus address. I couldn't even screenshot it, but the full headers tell the story.

It was sent from a comcast address: from dovdir4-asb-03o.email.comcast.net ([96.102.167.131])

Trace ended somewhere near Hillsboro Oregon.

As others have said. ANY question on Social Security, go to ssa directly. online or in person, if you can.

https://www.ssa.gov/

Just do not click on any link or reply in any way.
Those links and addresses could easily be fake, and disguised.

Safe Computing!!

[yellow dahlia]

1. We need to keep amplifying this warning.

[Srkdqltr]

2. Good to know. I got one of those. Did not open it.

[CousinIT]

3. Never open an attachment that you're even the slightest suspicious of either.

Contact the person or entity directly, at least, to verify its validity. If you aren’t sure, don’t open the attachment. Email attachments can have malicious payloads (spyware, malware, viruses)

Social Security doesn’t send email attachments AFAIK. They send me an email yearly reminding me to go online and view my statement and how to correct any errors. There is never an attachment.