Virgin Media Community

[philip_talmage]

Have today received this phishing email - via my Blueyonder (a.k.a. Virgin Media) email. Can't VM intercept this sort of rubbish rather than sending it on to its customers?

[用心棒 · Accepted solution]

Judging by the frequency of posts warning of or raising this issue… No.

[philip_talmage]

We can also infer that nobody at VM monitors the posts on this site, or, if they do, care about what's written.

[Ryan_N · Accepted solution]

We sure do, philip_talmage. I apologise for the delay in response. 

It's easy to assume that these email can be intercepted before they get to anyone, but it is near impossible to do so. The rate and different varieties are constantly changing. 

If it is possible could you please forward over the email you have received to; phishing@virginmedia.com

Thank you. 

[用心棒 · Accepted solution]

---

@Ryan_N wrote:

⋮
It's easy to assume that these email can be intercepted before they get to anyone, but it is near impossible to do so. The rate and different varieties are constantly changing.
⋮

The email headers shown below are from a phishing email I received to my Inbox and server side filtering could, and should, have caught it and flagged it as spam.

(0) improbable source for Virgin Media company email
(1) display name, email address username, and email address domain
(2) subject; with no attempt to obfuscate the purpose
(3) a remote resource link that does not match the source link

The detection of 3 should have been enough to either flag this as spam or at the very least a candidate for further scrutiny and combinations of 0, 1, and/or 2 enough to confirm it.

[philip_talmage]

OK - have done. Source code included - do you need that?

[David_Pn]

Thank you for getting back to us and confirming philip_talmage.

Any information which you can provide will be very useful.

Thanks for forwarding the email to us for our attention. 

[philip_talmage]

I forwarded the phishing email, as requested. BUT VM HAS REFUSED TO RECEIVE IT! Because it contained spam contemt ... doh!

This is what appeared in my spam folder:

Message Delivery Failure

mailer-daemon@virginmedia.com

17:08

To  [REMOVED]

• Quick reply
• Reply all
• Forward
• Delete
•  

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed permanently:

* phishing@virginmedia.com

Reason: This is the mail system at host know-smtprelay-1-imp.

I am sorry to have to inform you that your message, "Fwd: The payment for your latest bill failed", could not be delivered to phishing@virginmedia.com.

The remote server returned the below error when attempting delivery:

554:554 5.2.0 MXIN602 Message contains Spam Content ;id=FKhJi8EY2xPj9FKhJiZaff;sid=FKhJi8EY2xPj9;mta=mx2.tb;d=20191001;t=180822[CET];ipsrc=80.0.253.65;

Ha Ha Ha ...

[Gareth_L]

Hello philip_talmage,

Apologies you were not able to forward the email on to us 

Just to confirm we are aware of this email already and our Phishing Team will have done all the necessary steps to stop this specific email. 

The main thing to do is mark this email as spam and delete it 

Gareth_L

[patthecat]

Hi,

I got one today from a .jp mail address  Virgin Media <akihito.matsumura@tvk-coms.co.jp>.

Forwarded and sent as attachment to the VM phishing address.

BR

Pat