HN Explorer

JetBlue Phone Number is/ may be Hacked

9 points by pettycashstash2 ↗ HN
I was planning a family vacation. Went to jetblue.com and dialed the JetBlue phone number on website. 1-800-JETBLUE (1-800-538-2583) Agent took all my information, including payment information. They then proceeded to sent me phishing email from support@cheapfareservice.com, which is what raised red flags. how were they able to take over the JEt blue phone number?

10 comments

[ 0.24 ms ] story [ 38.3 ms ] thread
pettycashstash2
It may also be there may be a mole in the JETBLUE Org. I x'd out the personally identifiable info. here's the email: -------------------------------------------------------------------

Please find the itinerary details for your trip below:

Traveler Details

xxxxxxxxxxx (xxxxxxx)

True Blue number:- xxxxxxxxxxxxxx

xxxxxxx (xxxxxxxxxx)

xxxxxxxxxxx(xxxxxxxxxxxx)

xxxxxxxxxxxxxx (xxxxxxxxxxxxx)

Flight Details: -

Departing flight Sat, Feb xx

7:34 AM John F. Kennedy International Airport (JFK)

Travel time: 4 hr 21 min

11:55 AM Cancun International Airport (CUN)

JetBlue

Returning flight Sat, Feb xx

5:15 PM Cancun International Airport (CUN)

Travel time: 3 hr 45 min

9:00 PM John F. Kennedy International Airport (JFK)

JetBlue

Cost Summary:

Points Used :- 476400 Points

Total Price with Taxes & Fees: 624.99 USD (Charged As SkyFlightCheap)

Your credit card may be billed in multiple charges totaling the above amount. Some airline may charge Baggage Fees.

NAME OF CARD HOLDER: xxxxxxxxxxxx

CARD DETAILS: AMX xxxxxxxxxxxxxxxx

Policies & Review

· Please confirm that the names of travelers, date and time of flight departures are accurate.

· Tickets are non-transferable and any change in the name of traveler is not permitted.

· Tickets are non-refundable non-changeable and non-cancellable in variable cases.

· Date and routing changes will be subject to airline penalties and our service fees.

· Fares are not guaranteed until ticketed.

· All our service fees and taxes are included in the total ticket cost.

Cancellation & Refund Policy

Tickets are Non-Refundable after 24 hours of purchase for all major airlines. For Low Cost Carriers, like Spirit Airlines, Frontier Airlines, Sun Country, etc. Refund not possible if departure date is within 7 days of Booking. · For major airlines - tickets may be refunded if requested within twenty four (24) hours from the time of purchase at no cost, however, if the customer decides to cancel a ticket after 24 hours from the time of booking, a nominal cancellation fee will be charged and will be subjected to Refund or Future Credit as per Airline Policy.

For low cost carriers (LCC), ticket will be non-refundable once booked, however, a Future Credit may be provide as per the Airline policy. All Cancellation are possible only before 4 hours of scheduled departure time.

Change Policy

Changes are possible as per the ticket fare rules, with an airline changes fees and fare difference. All Changes are possible only before 4 hours of scheduled departure time.

Declaration

I, <NAME> have read the term & conditions and I understand that fare is non-refundable. I agree to pay a total amount as mentioned above for this purchase. I understand is to serve as my legal signature.

Your e-Ticket will be emailed within 4 hours to your email address, once your credit card verification has been completed.

For any Question & Queries, Feel free to reach us at 1-(800) 792-8131.

We value your business and look forward to serve with your travel needs in the near future.

Thank you,

Ben

1-(800) 792-8131

(Ext.: 4017)

fragmede
Googling for 1-(800) 792-8131 only brings up scammy-looking vacation looking sites and not Jetblue. I think yer phone's hacked, yo
pettycashstash2
I did not dial this number. I called 1-800-JETBLUE. My number is not hacked it’s a classic landline :). I caught on it was a scam based on the above email, where the domain name they were sending from was not JetBlue.com.
cmeacham98
I think rogue call center employee is the most likely scenario here. Call your CC company and have the fraudulent charge reversed, and then book again.
pettycashstash2
This is good advice and I did that immediately following the call. I was intrigued that JetBlue was infiltrated. Typically these folks are Man in Middle attacks or reach out directly to victims and perform some kind of social engineering manipulation. I would hope that JetBlue and others have monitoring and systems in place that would prevent this type of activity, especially in your own call center. What that means is that they most likely use their own devices.
pettycashstash2
I also double checked that I dialed the correct number for Jet BLUE: Here's my call log from my phone company and call duration:

(800) 538-2583 Today 05:27 PM 01:06:35

ev1
did you go DIRECTLY to jetblue.com from a clean browser with ad blocking?

according to bbb reviews, cheapfareservice/skyflightcheap is one of those scam companies that purchase text ads for the keywords jetblue, delta, etc and put up their own site with the domain set to the right one in ad creation, and act as a middleman to rent seek

cmeacham98
The phone number they list is accurate and they claim it is what is listed in their phone's history.
pettycashstash2
Yes, actually verified this as well. This was a new and surprising attack vector for me where one calls a trusted number and that organization has been infiltrated by bad actors. This means that operational security of that organization is impacted.