Why did I receive this email?

Malware detection, cleaning and prevention
Post Reply
cbubner
Posts: 15
Joined: Thu Aug 23, 2007 2:01 pm
Location: Townsville, QLD

Why did I receive this email?

Post by cbubner » Sun Jan 10, 2010 8:26 am

Hi,

Can some one at Exetel please explain why I received this email below as it was not address to me? Considering this is NOT my email address.

Thank you

From: alert@exemail.com.au
To: mareelinare@exemail.com.au

Dear user of the exemail.com.au mailing service!

We are informing you that because of the security upgrade of the mailing service your mailbox (mareelinare@exemail.com.au) settings were changed. In order to apply the new set of settings click on the following link:

http://exemail.com.au/owa/service_direc ... areelinare

Best regards, exemail.com.au Technical Support.

Letter ID#PS4M01S5YR56B

User avatar
jokiin
Volunteer Site Admin
Posts: 2970
Joined: Mon Feb 02, 2004 10:23 pm
Location: Sydney

Re: Why did I receive this email?

Post by jokiin » Sun Jan 10, 2010 9:13 am

cbubner wrote:Hi,

Can some one at Exetel please explain why I received this email below as it was not address to me? Considering this is NOT my email address.

Thank you

From: alert@exemail.com.au
To: mareelinare@exemail.com.au

Dear user of the exemail.com.au mailing service!

We are informing you that because of the security upgrade of the mailing service your mailbox (mareelinare@exemail.com.au) settings were changed. In order to apply the new set of settings click on the following link:

http://exemail.com.au/owa/service_direc ... areelinare

Best regards, exemail.com.au Technical Support.

Letter ID#PS4M01S5YR56B
it's an attempt to steal your login details, it did not come from Exetel, just delete it but be aware you will probably get it again

cbubner
Posts: 15
Joined: Thu Aug 23, 2007 2:01 pm
Location: Townsville, QLD

Re: Why did I receive this email?

Post by cbubner » Sun Jan 10, 2010 9:25 am

jokiin,

Thanks for the speedy reply, I am running Vista HP OS with Trend Micro security, if I place this in the blocked addressees with that work as far as not getting any more?

Cheers

User avatar
Dazzled
Volunteer Site Admin
Posts: 5997
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Why did I receive this email?

Post by Dazzled » Sun Jan 10, 2010 9:30 am

If you haven't yet deleted it, look at the full email header - you will see your email address there, probably in the Envelope field. To some extent these thieves prey on people who use email clients that hide stuff from the user. Also look at the real link address underlying the apparent Exetel address.

I run a script on my computer, and all spoofed links and mismatching addresses get a red warning popup for company.

User avatar
Dazzled
Volunteer Site Admin
Posts: 5997
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Why did I receive this email?

Post by Dazzled » Sun Jan 10, 2010 9:33 am

cbubner, before blocking anything, please read the full header. Almost certainly the only valid address will be the Exetel router and perhaps the last poor sucker it passed through. You will be unlikely to find anything real to block, except the real link that underlies the Exetel address.

A good email filter will recognise the text if it comes again.
Last edited by Dazzled on Sun Jan 10, 2010 9:35 am, edited 1 time in total.

cbubner
Posts: 15
Joined: Thu Aug 23, 2007 2:01 pm
Location: Townsville, QLD

Re: Why did I receive this email?

Post by cbubner » Sun Jan 10, 2010 9:34 am

Thanks for that.

Have a good weekend.

Cheers

SysAdmin
Exetel Staff
Posts: 612
Joined: Mon Aug 22, 2005 9:36 am

Re: Why did I receive this email?

Post by SysAdmin » Mon Jan 11, 2010 11:33 am

I've added alert@exemail.com.au as a blacklisted sender email address to the mail storage servers. Nothing legitimate would come "from" such an address.

Andrew

Tim K

Re: Why did I receive this email?

Post by Tim K » Mon Jan 11, 2010 4:26 pm

cbubner wrote:jokiin,

Thanks for the speedy reply, I am running Vista HP OS with Trend Micro security, if I place this in the blocked addressees with that work as far as not getting any more?

Cheers
Probably not - well at least not effectively.

While it will work for emails from that address, unfortunately from time to time we (and I'm sure many other ISP's and services) are the target of 'phishing' emails that are designed to steal your login or credit card or other personal details. It was common for a while for banks to be the target as well. And the email address they are using will probably change every time, but they'll often go to at least some effort to make it look legitimate (and unfortunately there's very little we can to do stop this!)

Bottom line: Even if it looks legitimate, if you ever receive an email you weren't anticipating from any person/company you do business with asking you to confirm your account details, or confirm your password, treat it as fake.

Old Flame
Posts: 212
Joined: Sat Oct 02, 2004 8:08 pm
Location: Wollongong, NSW

Re: Why did I receive this email?

Post by Old Flame » Mon Jan 11, 2010 5:53 pm

Tim K wrote: if you ever receive an email you weren't anticipating from any person/company you do business with asking you to confirm your account details, or confirm your password, treat it as fake.
When I receive these from banks I often reply (From a different expected spam email address with) John Howard, Some made up address in Canberra, and Some made up account number so it flags the bank that another one is trying to get in at least).

Post Reply