Forum Discussion

Wyvern2's avatar
Wyvern2
On our wavelength
2 months ago
Solved

More than a simple 'Phishing' scam

My Virgin Media Account was set-up many years ago with an *.ntlworld.com email address. Several secondary accounts were linked to this and are still working perfectly.

Unfortunately, it seems that there have been several data breaches in the past. The main email address has been 'pwned', but none of the strong passwords that I use have been leaked.

A couple of days ago, people in my Address List started to receive scam emails. My email address had been 'Spoofed' - it was identical to the correct address.

I have informed as many of my contacts as possible not to respond, and to delete the emails from their systems.

The problem is actually more severe than this. The hacker is capturing all the messages sent to the *.ntlword address, and is generating more fake emails. Importantly, however, I no longer receive any of the messages.

I have reported the 'phishing' scams to Virgin Media Security who have given me some advice, but it does not really solve the problem.

I have changed my Virgin Media login address to one of the secondary accounts, so access to the original *.ntlworld.com account is no longer accessible

Virgin Media are keen to have a primary address that is not from Virgin. I have an account with another provider, but there were problems with authentication.

What I really want is for the original *.ntlworld.com email to be closed immediately, to stop the flow of information to the hacker. I still need Virgin Media account though!

How can this be done?

  • Hi all,
    I contacted an agent at one of the call centres. He was very knowledgeable and sorted out logging into my account using Gmail rather than Virgin Media. This appears to be the approved method as it provides better security and recovery.

    Thinking that everything had been solved by using a default password, the agent took me through various deals on offer and we found one which suited me well. I said that I would like to see the contract details first. The agent agreed to download them to my now apparently operational account. The documents didn't arrive!

    The Hacker had actually managed to get access to my account (I had been locked out) and had changed some filter or other. I assume that he had arranged call-forwarding to his address. I was most impressed that the agent was able to correct this problem too!

    Everything is now back to normal, thanks to Virgin Media's support teams.
    Kind regards
    Wyvern2

  • Hi Wyvern2,

    Thanks for your post and welcome back to our community.

    I'm very sorry to hear that your email account has been hacked.

    I'll send you a private message now to help get this closed. I can also help you change your username for the online account to a non Virgin Media address. 

    Please look out for the envelope in the top right of the page and pop back to me when you can. 

  • Wyvern2's avatar
    Wyvern2
    On our wavelength

    Hi all,
    I contacted an agent at one of the call centres. He was very knowledgeable and sorted out logging into my account using Gmail rather than Virgin Media. This appears to be the approved method as it provides better security and recovery.

    Thinking that everything had been solved by using a default password, the agent took me through various deals on offer and we found one which suited me well. I said that I would like to see the contract details first. The agent agreed to download them to my now apparently operational account. The documents didn't arrive!

    The Hacker had actually managed to get access to my account (I had been locked out) and had changed some filter or other. I assume that he had arranged call-forwarding to his address. I was most impressed that the agent was able to correct this problem too!

    Everything is now back to normal, thanks to Virgin Media's support teams.
    Kind regards
    Wyvern2

    • Vikki_M's avatar
      Vikki_M
      Forum Team

      Hi Wyvern2,

      I'm happy to hear this has now been resolved.

      If you have any further questions or concerns, please do pop back to us here on the community forums and we'd be happy to help.

      Take care.