anyone else being hammered by this

I've gotten almost 100 attempts since Friday

Phising
Does it hurt?

I think he means Phishing.

If this is what I think it is, then yep, it happened to me yesterday. Some asshole in Belarus highjacked my email account and changed my login info for Netflix. I was on the phone for an hour with Netflix CS getting it straightened out. I have no idea how he got around the security on my computer. The Netflix guy said that they are running into the issue a lot lately.

Jim

nhtagmember, can you explain/describe what is happening so I would recognize it if it happened to me?

And I thought you're in IT or IT savy or do I have that wrong?

please, explain...

0-0

Getting plastered with dozens of emails - literally one every few minutes - all from LogMeIn.***

they all go to junk and tell me its an account audit, with just a link in the body

If I look at the link, its a different domain name every time so blocking emails from a specific domain doesn't work - you would need to block it by the LogMeIn.* which doesn't seem to work

I haven't gotten any since early Monday morning

Just because it says it is from "LogMeIn" doesn't mean that is the source or that it is from them.

If sites to with which people did business and all mail servers supported email tagging (aka: "plussed" email addresses), and the public was educated to use them, phishing could be drastically reduced.

quote:

Originally posted by smschulz:
Just because it says it is from "LogMeIn" doesn't mean that is the source or that it is from them.

that is true, however I've never used LogMeIn, never heard of it until I had 50 emails in my junk box, and it was coming to my business email address

quote:

Originally posted by ensigmatic:
If sites to with which people did business and all mail servers supported email tagging (aka: "plussed" email addresses), and the public was educated to use them, phishing could be drastically reduced.

Also I advise my clients not to use their business email account for personal business.
That alone cuts a lot of crap out of the business email and keeps the IT staff much happier.

Donnotlogthemin



0-0

It is a lot easier when one recognizes that they don’t do any business with the company “supposedly” sending the email. Bank of America? Yeah, right. Straight to junk. Also unfamiliar with logmein, but based on the name, I’d guess it’s a password vault. Smart password to phish as it gets the phisher to all the stored passwords. Too bad these folks can’t be tracked down and summarily executed.

quote:

Originally posted by smschulz:

quote:

Originally posted by ensigmatic:
If sites to with which people did business and all mail servers supported email tagging (aka: "plussed" email addresses), and the public was educated to use them, phishing could be drastically reduced.

Also I advise my clients not to use their business email account for personal business.

And vice-versa.

There are serious liability questions in mixing the two. Corporations should not allow the use of corporate email accounts for personal use, nor allow the use of personal email accounts for business-related communications.

To end-users (employees): If you use your private email address to conduct business on behalf of your employer, your entire email store just became subject to discovery under the Federal Rules of Civil Procedure. All of it. And don't be thinking you can just delete the embarrassing or personally sensitive stuff should it become necessary. If an action is brought against your employer, and you have business communications in your private email account, you can delete nothing. Doing so will run you afoul of federal, and possibly state, law regarding the preservation of evidence.

To employers: If your employees use personal email for corporate business: You are on the hook for complying with discover demands. Good luck! (You may also be liable for ensuring they abide by corporate records retention policies. Again: Good luck!)

quote:

Originally posted by smschulz:
That alone cuts a lot of crap out of the business email and keeps the IT staff much happier.

Our policy was this: 1. Employees were not prohibited from using corporate email for personal use, but it was discouraged and it was made clear all data on corporate systems was corporate property. 2. If somebody's personal email was getting blocked they were SOL. IT would not put any effort into tracking-down why, much less modifying email server rules to get it un-blocked.

Policy point #1 was simply pragmatism: We couldn't actually stop it, per se, and I was not fond of creating rules that could not be enforced.

Our policy regarding the use of private email accounts to conduct business was it was strictly prohibited.

Regarding the post above... yeah. Unless You are Hillary.

I keep seeing this post and wanting Chinese every time it pops up.

Heard there is a Netflix email going around asking you to click on the link to verify your info.
I'm sure people are doing just that because they don't want to lose their Netflix!

ETA: I see Jimbo may or may not have urn into this. Not sure if it's the same thing.