Forum Discussion

Int-Sec's avatar
Int-Sec
Moderator
17 days ago

Latest Phishing News 26/02/2025

Latest Phishing News 26/02/2025

We have been informed about the following Phishing Emails that contain the content copied below. These emails were NOT sent by Virgin Media O2 and should NOT be responded to. Please DO NOT visit the links included in the emails or respond. The emails should be deleted and ignored, and can be forwarded on to our dedicated Phishing Mailbox.

Email 1:

Virgin Media

This is to bring to your notice that your bill is not available in PDF.
Even though some of your costs are going up, your package will not alter.

Please follow the link below to view your bill.

CLICK HERE TO VIEW YOUR BILL

Thank You.
Please do not reply to this message. Mail sent to this address cannot be answered.


Email 2

V I R G I N M E D I A

Dear user,

We are closing all old versions of our mailbox as of  Feb 26th 2025, Too many spam messages have been sent on old versions of mail. 

Please follow the link below to update your account to New Version...

UPDATE NOW

Thank You.
Please do not reply to this message...
Mail sent to this address cannot be answered..


Email 3

Virgin Media Received For You

Duration 1:36 secs 

Received:Wednesday , February 26, 2025

........................................................................
 
Play_Voicemail

  • ALF28's avatar
    ALF28
    Super solver

    thanks for keeping phishing news updated.

    I have noticed that the fake emails sometimes may have spoofed Ip address sources, where the Ip address may look to be Virgin media as a correct IP address, but may have been spoofed and  is not actually the isp VM but some other company/organisation. 

    The spam email may be designed to use an official IP address to get past spam filters.

    This is rare as many spam emails hide behind a VPN ip address and from outside of the UK, but I have seen several spams sent to my other emails that used some VM ip address's , then another similar/same email will have a USA ip address.

    So the spam/phishing emails have an IP address that can not be traced back to the sender and may be done using business servers and software.

    If in any doubt, always go to the real website rather than click on any email links, and check if the ip  address source shown in the header is actually from the correct isp/company.

    The spammer can easily make an email look genuine.

    IP spoofing: What is it and how does it work? | NortonLifeLock

    • ALF28's avatar
      ALF28
      Super solver

      It is puzzling how spam emails switch sender email address and ip address on each email, so the emails can be from any country, including the UK-Scotland, England etc as well as the USA and other countries.

      It is possible spam email can originate from infected computers called zombies so wise to do virus scans regularly, which I do, and keep software up to date. I am sure VM do their own checks, but I do get spam  emails from VM IP addresses in the UK usually selling security products, debt etc.s

      Also watch out for bounce back emails, where someone uses another persons email address, I have had that several times

      see-

      How to Tell If Your Computer Is Sending Spam? | It Still Works