phishing scam disguised as a phishing warning?

Message boards : Cafe SETI : phishing scam disguised as a phishing warning?
Message board moderation

To post messages, you must log in.

AuthorMessage
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1802859 - Posted: 16 Jul 2016, 2:30:39 UTC

I got an email this evening from a company I've never heard of warning me that my password on a site they own, which I've also never heard of, was breached in February and they learned about it this week.

Fortunately, my email site initially shows me only text, with an option to see html if I want to.
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1802859 · Report as offensive
kittyman Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 9 Jul 00
Posts: 51468
Credit: 1,018,363,574
RAC: 1,004
United States
Message 1802862 - Posted: 16 Jul 2016, 2:35:48 UTC - in response to Message 1802859.  

I got an email this evening from a company I've never heard of warning me that my password on a site they own, which I've also never heard of, was breached in February and they learned about it this week.

Fortunately, my email site initially shows me only text, with an option to see html if I want to.

I instantly delete WITHOUT viewing, any email I get in my inbox that I do not know the source of.
DO NOT hit the view button.
"Freedom is just Chaos, with better lighting." Alan Dean Foster

ID: 1802862 · Report as offensive
Profile zoom3+1=4
Volunteer tester
Avatar

Send message
Joined: 30 Nov 03
Posts: 65746
Credit: 55,293,173
RAC: 49
United States
Message 1802871 - Posted: 16 Jul 2016, 3:25:36 UTC

I got one saying My bank access was compromised, and they mentioned who I bank with, yet I don't release that information, and I went paperless over a year ago.

No I did not respond, bunch of hooey...
The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1802871 · Report as offensive
Profile j mercer
Avatar

Send message
Joined: 3 Jun 99
Posts: 2422
Credit: 12,323,733
RAC: 1
United States
Message 1802874 - Posted: 16 Jul 2016, 3:48:25 UTC

I use a program called Mailwasher for 15 years. It shows you a text/html copy of email off the email server and you can decide to delete it right off the email server. It doesn't do anything with attachments but you can see one's there and how big it is.

This crap never comes to your computer. You deal with it on the email server. You can develop black lists & friends lists and it will delete the junk automatically and only let the good stuff through.
...
ID: 1802874 · Report as offensive
Richard Haselgrove Project Donor
Volunteer tester

Send message
Joined: 4 Jul 99
Posts: 14650
Credit: 200,643,578
RAC: 874
United Kingdom
Message 1802913 - Posted: 16 Jul 2016, 10:05:44 UTC - in response to Message 1802874.  

I use a program called Mailwasher ...

Yes, a very useful program. I've also used it to deal with a flood of incoming mail coming from a mis-behaving upstream SMTP server - doesn't matter whether it was a malicious DDOS attack or a mis-configured (or compromised) corporate server - the mail was still flooding in faster than traditional POP3 clients could cope with it. Mailwasher did the trick in no time at all.
ID: 1802913 · Report as offensive
Dr Who Fan
Volunteer tester
Avatar

Send message
Joined: 8 Jan 01
Posts: 3213
Credit: 715,342
RAC: 4
United States
Message 1802946 - Posted: 16 Jul 2016, 14:06:50 UTC

I use the free version of Abine's BLUR to create a unique disposable email address and/or password - one for each web site that requires a email and/or password to sign in/register.

This lets me figure out the who/what/where compromised my information and block and/or delete that email address.

My primary email is through Google. In the many years I have used Gmail, there has not been any spam/scam/phising emails in the in-box. The few that have arrived automatically are tossed in the spam folder where I can view them safely if I want.

My simple rule of thumb is NOT to open any email from something/one I do not know. Prevents 100% of Phishihg attempts!
ID: 1802946 · Report as offensive
Profile Gary Charpentier Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 25 Dec 00
Posts: 30651
Credit: 53,134,872
RAC: 32
United States
Message 1802955 - Posted: 16 Jul 2016, 14:24:40 UTC - in response to Message 1802946.  

My simple rule of thumb is NOT to open any email from something/one I do not know. Prevents 100% of Phishihg attempts!

No, spoofing will get you to open it. And pishers like to spoof as it makes their results better. And be glad you haven't been spear phised yet.
ID: 1802955 · Report as offensive
Profile tullio
Volunteer tester

Send message
Joined: 9 Apr 04
Posts: 8797
Credit: 2,930,782
RAC: 1
Italy
Message 1803490 - Posted: 19 Jul 2016, 12:44:13 UTC - in response to Message 1803486.  

I get every month a mail apparently coming from my mail provider which says "Prego aprire il fattura". But "fattura" in Italia in a feminine word, so the message should be "Prego aprire la fattura".
Tullio
ID: 1803490 · Report as offensive
Profile Donald L. Johnson
Avatar

Send message
Joined: 5 Aug 02
Posts: 8240
Credit: 14,654,533
RAC: 20
United States
Message 1804684 - Posted: 24 Jul 2016, 16:17:39 UTC

My primary email provider is CompuServe/AOL. I use their web-based email suite, so nothing gets to my computer unless I download it. I have it set up to show me the actual email address of the sender, and it has a pretty good set of SPAM filters. It also shows me the actual IP address of any link in the email when I put the cursor over it (but NOT click on it).

The other thing that gives away phishers is that all the financial institutions I do business with use my Account Name to address me. No "Dear Customer" or "70524.....". And anybody who wants to give ME millions of USD$ is an obvious faker.....
Donald
Infernal Optimist / Submariner, retired
ID: 1804684 · Report as offensive
Profile celttooth
Avatar

Send message
Joined: 21 Nov 99
Posts: 26503
Credit: 28,583,098
RAC: 0
Canada
Message 1804695 - Posted: 24 Jul 2016, 16:50:21 UTC

Right now I do all my personal mail on my ISP's server.
Over at tootpix, that mail is very exclusive indeed.


ID: 1804695 · Report as offensive

Message boards : Cafe SETI : phishing scam disguised as a phishing warning?


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.