Care - Phising Scam using PH

[flyingjase]

Watch out chaps, I have just had an email purporting to be from [e-mail] advising that a new email address has been added to my PH account and if it's not authorised by me then to click on a link (which captures your user name and password)

I nearly fell for it as I didn't expect phishers to target PH. I have had them from eBay & PayPal but they seem to be going after anything these days, probably to advertise a car that doesn’t exist.

The 'new' email address has been added is [e-mail] which when googled comes up with lots of phising examples

Just a heads up for you

Jason

[funkyrobot]

Have you reported this?

Good one for the heads up!

It may catch someone out.

[central]

looks like they're on to it

[flyingjase]

Yes, sent the email over the support boys so hope they can stop anyone getting caught out

[190E Matt]

Ah feck I fell for it, until the address came up in the bar at the top as marlow1.com or something.

[Garlick]

Pete and Will are looking into this right now.

Matt, what are you advertising? Can you PM me the details please

[190E Matt]

Garlick said:

Pete and Will are looking into this right now.

Matt, what are you advertising? Can you PM me the details please

Advertising nothing at the moment, they must have taken the details from when I advertised the 190E a few months ago (I removed the advert shortly after putting it up)

[Garlick]

190E Matt said:

Advertising nothing at the moment, they must have taken the details from when I advertised the 190E a few months ago (I removed the advert shortly after putting it up)

Thanks for letting me know, I appreciate that.

[richardxjr]

I just had this email too and nearly fell for it.

Firstly the email text is a pic, secondly hover over the URL they want you to click on (which looks like a pistonheads link) and it reveals the true location as x1t.org/1hq

As with most of these phishing emails, it was not addressed personally, just to 'Dear Valued PistonHeads Member'

I have no live ads atm either.

Edit: the fake login page the link takes you to is a very convincing PH copy.

Edited by richardxjr on Wednesday 1st April 18:00

[RacingPete]

If you have logged into the fake site then it is a good idea to change your password on PistonHeads just to make sure.

[190E Matt]

Garlick said:

190E Matt said:

Advertising nothing at the moment, they must have taken the details from when I advertised the 190E a few months ago (I removed the advert shortly after putting it up)

Thanks for letting me know, I appreciate that.

Sarcasm?

[Garlick]

190E Matt said:

Garlick said:

190E Matt said:

Advertising nothing at the moment, they must have taken the details from when I advertised the 190E a few months ago (I removed the advert shortly after putting it up)

Thanks for letting me know, I appreciate that.

Sarcasm?

No, genuine

[matc]

Just recieved this; glad I popped in here to see if it was a scam.

[KingJeff 4th]

matc said:

Just recieved this; glad I popped in here to see if it was a scam.

Me too, almost fell for it.

Bloody sods.

I dont know if its a trend, but i was advertising something recently. If that helps.

[RacingPete]

We are researching the contacts sellers have had with people through the site at the moment to investigate how they collected the email addresses, it is possible one of the email addresses used to ask you a question on your car has collected this information.