Forum Discussion

Rudders60's avatar
Rudders60
On our wavelength
2 years ago

Are Blueyonder Email Accounts being hacked

I don't regularly monitor my Blueyonder account as it is no longer used but kept for historical emails.
On Wednesday 10th April I received a threatening email saying my email/password has been compromised and stating my password and asking for money. Interestingly the password shown was the one provided to me back in October 2022 when I asked for my secondary emails to be reset.
The hackers have now attempted to create accounts using this old email address on Uber, LinkedIn, Instagram, Apple, Tinder, etc and are using this email to SPAM other users.

My primary Blueyonder email account and three secondary accounts had password resets at the same time and I suspect that all four accounts have been hacked using this data and I request that all four accounts are delated please.
I hope you have a record of when the account password reset requests were made as I would like to include this with the information information I am sending to GCHQ and the FBI.

14 Replies

  • Rudders60's avatar
    Rudders60
    On our wavelength

    I'm guessing VM don't send out emails like this when closing email accounts down

    Subject:             YOUR COMPUTER AND EMAIL HAS BEEN COMPROMISED. CHECK THIS MESSAGE NOW! Importance: High

  • Rudders60's avatar
    Rudders60
    On our wavelength

    Also posted in error under Broadband/Email

     

    I don't regularly monitor my Blueyonder account as it is no longer used but kept for historical emails.
    On Wednesday 10th April I received a threatening email saying my email/password has been compromised and stating my password and asking for money. Interestingly the password shown was the one provided to me back in October 2022 when I asked for my secondary emails to be reset.
    The hackers have now attempted to create accounts using this old email address on Uber, LinkedIn, Instagram, Apple, Tinder, etc and are using this email to SPAM other users.

    My primary Blueyonder email account and three secondary accounts had password resets at the same time and I suspect that all four accounts have been hacked using this data and I request that all four accounts are delated please.
    I hope you have a record of when the account password reset requests were made as I would like to include this with the information information I am sending to GCHQ and the FBI.

  • 用心棒's avatar
    用心棒
    Very Insightful Person

    This form of threatening communication is a common tactic used by miscreants to extort victims. To improve the likelihood of success the miscreant will deploy a  psychological ruse by including information that they have obtained elsewhere to imply truth and/or risk from other things mentioned in the communication. For example, the miscreant may quote an old or current password that the victims uses or used to use.

    Consider following the advice here, My Virgin media email has been hacked | Virgin Media Help and Report a phishing attempt | Action Fraud

    FYI: the remit of the organisations mentioned (GCHQ - Wikipedia, Federal Bureau of Investigation - Wikipedia) makes it unlikely they would act on such an issue.

    -- 
    I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more
    Have I helped? Select Mark as Helpful Answer or 🖒 Kudos to say thanks

    • Rudders60's avatar
      Rudders60
      On our wavelength

      Apologies, I did not realise giving you a thumbs up meant I had accepted your solution - I was just thanking you for your reply. Until I'm back in control of my account my problem has not been resolved.

      Thank you for your reply. I did full system scans on my devices with no malware found. I also run a SurfShark VPN on these devices. Naturally I never open links in email unless I'm 100% sure that they have been sent by a known contact. I'm unable to secure my email account or review auto forward settings because my password has been changed by the hacker.

      I was rather hoping for the pictures of me with naked ladies but sadly those threats never materialised.

      What did concern me were the fact my email password has been changed and emails from Uber, LinkedIn, Instagram, Apple, Tinder, etc confirmed that the the hacker was trying to access those accounts, albeit with the wrong email address. NB I don't have a Tinder account.

      I'm familiar with reporting to report@phishing.gov.uk  (Action Fraud is part of The NCSC who are UK's technical authority for cyber threats. It is part of the Government Communications Headquarters (GCHQ) and has several roles in NIS.) IdentityTheft.gov , ReportFraud.ftc.gov  have links to the FBI.

      I really want to know how the hackers convinced Virgin Media to reset my email password so that we can stop this happening again. 

       

      • 用心棒's avatar
        用心棒
        Very Insightful Person

        Rudders60 wrote:
        â‹®

        I really want to know how the hackers convinced Virgin Media to reset my email password so that we can stop this happening again. 

         


        In an attempt to improve the security of Virgin Media email accounts user are now prompted to change their Sign in Email Address to a third-party one, i.e. a non-Virgin Media email domain. A verification email link is sent to this third-party email address and only after its receipt is confirmed can the account password be changed and / or App Password generated. It will be interest to read if the miscreant have gone to those lengths to compromise your account.

        Consider checking if:

    • Rudders60's avatar
      Rudders60
      On our wavelength

      Sorry I do not accept this as a solution

      • Graham_A's avatar
        Graham_A
        Very Insightful Person

        Rudders60 If you click on the edit arrow of the post you marked as a solution you can revoke the helpful answer flag.

        You may choose to then give the post kudos as this is the correct way to say thank you on the forum.

  • Zach_R's avatar
    Zach_R
    Forum Team (Retired)

    Hi Rudders60,

    Thank you for your posts and welcome back to our community forums. We're here to help.

    I'm sorry to hear that you believe your email address/account may be compromised. I can see that some other community members have offered some advice in this thread in relation to this, but for your peace of mind we can certainly take a closer look to see what can be done to help.


    Please respond to the private message that I'll be sending to you shortly and we can go from there.

    Thanks,
     

    • 1XxKarenxX1's avatar
      1XxKarenxX1
      Just joined

      As of yesterday my mum received a email from herself trying to extort money. Why wasn't she  informed her details may of been leaked I have hopefully sorted it but with so much sensitive emails over 20 years a lot more accounts will need to be changed and updated and what else do we need to do thank you Ben 

      • Alex_RM's avatar
        Alex_RM
        Icon for Forum Team rankForum Team

        Hi 1XxKarenxX1,

        Thanks for posting and welcome to our community 😊

        Sorry to hear you believe the email address has been hacked, you can find help here regarding securing the account.

        If you need to update the virgin Media password for use over the phone, this can be done via the online account.

        Alex_Rm

  • Rudders60's avatar
    Rudders60
    On our wavelength

    Zach,

    As Virgin Media are only able to change email passwords for hackers and not lawful owners of the account, I have given up with you and reported our interaction with the National Fraud Reporting Centre (NFRC).

    In the meantime, your Mail Delivery System postmaster@virginmedia.com is having a busy time processing hundreds of "Mail delivery failed: returned to sender" response to emails sent by my historic email address that I'm no longer accountable for.

    Your failure to resolve this issue, despite answering all security questions to the best of my ability has conformed I made the right decision to leave Virgin Media and save me an absolute fortune with better performance with a Three 5G Router.

    Please confirm that all of my personal details that you requested for security checks are securely deleted.

    Thanks