Allotments 4 All

General => Computers / Internet => Topic started by: timnsal on July 31, 2006, 15:06:05

Title: WARNING - Phishing emails
Post by: timnsal on July 31, 2006, 15:06:05
In the last few days, I've had a lot of phishing emails (attempts to get your online bank details) to the email address I use for A4A. I only use the address for this site, and it's set to be hidden from the public. Which means there is a possibility something has been getting email addresses from here.

Be very careful if you get an email asking you to check your security details. NEVER follow any links in it, as they may lead to fraudulent sites. If possible, check on the official website (find it on google, or use your usual link) for the email to forward phishing emails to.

If you think you have clicked on one of the links, contact the organisation ASAP!

Sally
Title: Re: WARNING - Phishing emails
Post by: Curryandchips on July 31, 2006, 15:14:37
Yes, I can agree with what has been said. I created an email in January purely for this site, but then changed it almost immediately to another, yet my original email address has been targeted, typical subjects being bank accounts (non existent), paypal and ebay (which I don't use) etc. I don't think A4A has been hacked, but there is some other method of acquiring these addresses?
Title: Re: WARNING - Phishing emails
Post by: Jill on July 31, 2006, 15:33:52
Yep, I've had a couple of dodgy ones over the past few days, purportedly from Paypal and Egg.  Don't now use Paypal and have never had an account with Egg so I deleted straight away.  Beware.
Title: Re: WARNING - Phishing emails
Post by: Admin aka Dan on July 31, 2006, 15:37:18
Please send me the email internet headers, so I can investigate.

Thanks

Dan

admin@allotments4all.co.uk
Title: Re: WARNING - Phishing emails
Post by: ipt8 on July 31, 2006, 16:14:58
Sorry admin aka dan I just deleted an egg one before I logged on and read this.

I use lots of other sites but am surprised that others that only use an email address for this site appear to have had their adresses aquired from here. Are the email adresses visible to all? I had never considered this.
Ivor
Title: Re: WARNING - Phishing emails
Post by: timnsal on July 31, 2006, 18:55:52
I had an egg one today as well. And Halifax, paypal and Barclays in the last few days - all of which have responded to my reposts confirming the emails were fake.

Sorry Dan, I haven't kept the original emails, and the forwarded copies don't seem to include the header details. I'll send you the next one that comes.

Sally
Title: Re: WARNING - Phishing emails
Post by: tim on July 31, 2006, 19:04:02
The Egg & I?

Yes, had one today. But, like all the others, it was binned immediately.

Most of the 150 spams I get a day are for Viagra (me?), software (contradiction?), watches, stockmarket, slimming......................
Title: Re: WARNING - Phishing emails
Post by: Gadfium on July 31, 2006, 19:35:02
Yup, I've had them, probably over the past 4-10 days: 2 different ones supposedly from Paypal which contained dodgy spelling and basic grammatical errors (reported to Paypal), queries from two banks with which I have no accounts...  plus something in the french language (!) along the same lines.
Title: Re: WARNING - Phishing emails
Post by: katynewbie on July 31, 2006, 19:40:27
 :-\

Yep, I have had Barclays, Egg and PayPal...it's only PP I have any dealings with.
Title: Re: WARNING - Phishing emails
Post by: Hyacinth on July 31, 2006, 20:21:05
Over the past few days had paypal, barclays, halidax, egg (not had on-line dealings with any) - and that strange one I posted in The Shed yesterday. All to the h/mail a/c I use for here, not to my other accounts - tiscali & yahoo. All deleted & gone, tho.
Title: Re: WARNING - Phishing emails
Post by: angle shades on July 31, 2006, 20:25:36
i've had an egg e -mail,i get e-mails every time i log on this site, i dont have any internet accounts, but get hacked every single time i come on here,someone is trying now, sorry dan deleted e-mail straight away, this is the only site i log on to/shades x
Title: Re: WARNING - Phishing emails
Post by: Lady of the Land on July 31, 2006, 20:37:43
I have also had e-mails from Halifax recently and Egg today requesting details.
Title: Re: WARNING - Phishing emails
Post by: timnsal on July 31, 2006, 21:22:55
Quote from: Curry on July 31, 2006, 15:14:37
Yes, I can agree with what has been said. I created an email in January purely for this site, but then changed it almost immediately to another, yet my original email address has been targeted, typical subjects being bank accounts (non existent), paypal and ebay (which I don't use) etc. I don't think A4A has been hacked, but there is some other method of acquiring these addresses?

Is it just the original email address which is getting them? If so, it might mean that there is something in the registration page which is harvesting the addresses. I think that if you change your email address, the database only stores the new address (based on a quick look at another SMF forum)


Sally
Title: Re: WARNING - Phishing emails
Post by: froglets on August 01, 2006, 09:10:41
Paypal and egg - use neither.  tried to forward the egg one to egg but the e-mail failed to send after several attempts - possibly deliberately?

Deleted off the mail server 'cos I'm paranoid
Title: Re: WARNING - Phishing emails
Post by: Old Central on August 01, 2006, 09:26:09
I've been "Egged" and have still got the email.
Title: Re: WARNING - Phishing emails
Post by: supersprout on August 01, 2006, 09:27:55
Snap - I tried to forward as a spoof to Halifax and couldn't >:(
Title: Re: WARNING - Phishing emails
Post by: Hyacinth on August 01, 2006, 09:29:45
to clarify, then.....all mine go directly into my Junk Mail folder cos the addys aren't on my 'safe' list.....and I don't do anything with them except delete. Anything else I should do?
Title: Re: WARNING - Phishing emails
Post by: Curryandchips on August 01, 2006, 09:36:09
Quote from: timnsal on July 31, 2006, 21:22:55

Is it just the original email address which is getting them? If so, it might mean that there is something in the registration page which is harvesting the addresses. I think that if you change your email address, the database only stores the new address (based on a quick look at another SMF forum)


Sally

My original email addy was an ntl address which has now been changed to googlemail (useful - nothing ever gets deleted except by deliberate action). The offending emails have been sent to my ntl address, but not googlemail.

Editted update - I have forwarded one of the headers to Dan, as he requested, so he may have something to contribute.
Title: Re: WARNING - Phishing emails
Post by: Tulipa on August 01, 2006, 09:38:58
I have had Paypal and Barclays in the last 10 days but deleted them both.  Didn't open the Barclays but the Paypal one wanted me to access my account to check the details - would it have then picked up my details when I accessed it?  I didn't do what it said, thank goodness!  T.