TBayIT - Web Design / Development, Web Hosting, Content Management Systems

TBayIT Blog

TBayIT - Web Design / Development, Web Hosting, Content Management Systems

Tbaytel Targeted by Phishing Scam

Posted on September 6, 2011

If you use Tbaytel email services, you may have received an email asking you to provide account information or to verify your account information (see copies of messages at the bottom of this post) The first message asks you to reply and provide your name, email, username and password. The second message provides a link that asks you the same. Both are phishing scams and not legitimate. The second one looks very real and even includes the Tbaytel logo at the bottom. The simple fact is any company (email, hosting, banking, paypal, facebook, twitter, etc) never sends email messages asking for your password, account details or personal information.

How can you tell for sure if these are scams? Besides the fact that you should never provide account information online in response to an email, here is how. In the first email, the reply email address is rtadina@lorma.edu – obviously not Tbaytel. In the second email, you have to look at the link that they are asking you to visit which is tbaytel.net.ms – somebody put the extra effort into registering a similar domain to Tbaytel’s official domain. The dot ms is for the Country of Montserrat, I would guess that Tbaytel’s expansion hasn’t won’t cover this region.

I am curious to what these phishers are looking for in Tbaytel email accounts. It could be that many people have the same username/password for their email as they do for their DSL login (which also can be used for the dial up service). It may also allow access to their free hosting where they can put up viruses and more phishing sites. I would guess though that it is to impersonate you and send out sob stories to your friends/family asking to wire money somewhere. Regardless of why, always delete emails asking for account information and never follow a direct link in an email message (go to your browser and type it in or use your bookmarks to open websites). If you did provide information in response to one of these messages, contact Tbaytel immediately to change all of your passwords and it may be worthwhile to notify contacts in your webmail that you may have been hacked.


PHISHING MESSAGE 1

TBAYTEL.NET WEBMAIL TEAM SUPPORT UPDATE/MAINTENANCE OF USER ACCOUNT

DEAR TBAYTEL.NET USER,

Due to the congestion in all tbaytel.net users and removal of all
tbaytel.net Accounts,
TBAYTEL.NET WEBMAIL TEAM would be shutting down all unused Accounts.

We will be conducting our regularly scheduled maintenance, to ensure that
we provide the highest quality in Internet connectivity and services to
customers. Your connectivity and services with us may be interrupted for
short periods during the maintenance window.We will also ensure minimal
disruption to services where possible.

In order to enable us perform quality maintenance on your Internet
access and e-mail service, please you must reply to this e-mail message
confirming your tbaytel.net account details with us.


Do confirm your account details below.
_____________________________________
1. First Name & Last Name:
2. Full Login Email Address:
3. Username:
4  Password:
5. Retype Password:
_____________________________________

NOTE: Failure to respond to this e-mail message may result to technical
problems on your Internet access and e-mail service.


YOU ARE REQUIRED TO CONFIRM YOUR WEBMAIL IDENTITY WITH THE WEBMAIL TEAM BY
SIMPLY REPLYING TO THIS EMAIL WITH THE REQUESTED DETAILS.

Warning!!! Account owners who fails to update his or her account on
receiving this notice might loose his or her account.

Thank you for using tbaytel.net.

Tbaytel.net Support.
TBAYTEL.NET WEBMAIL TEAM"
©2011 All rights reserved 

PHISHING MESSAGE 2

IMPORTANT ACCOUNT NOTICE.

Dear Subscriber,
 
This is to inform all Tbaytel Mail Users {Residential & Business}  that there will be a general
server upgrade/maintenance scheduled for September  5th 2011. You may experience login problems
during this period. We are having congestion due to various anonymous account activated and on
this note, we are deactivating some accounts that are no longer active which your account may
be deactivated if no action is taken.
 
This is an automated message from our server; If you are receiving this message it means that
your email address has been queued for deactivation, this is as a result of a continuous error
received from this email address (code:505).
 
To confirm and keep your account active during and after the upgrade and maintenance, you are
advised to login immediately by clicking here Activate My Account.
 
Your E-mail account will remain active after we have successfully upgraded our server. This
is to help us serve you better. We apologize for any inconvenience.
Thank you for your swift response to this notification.
 
Note: Failure to resolve this problem by ignoring this message would result to the deactivation
of your account.
 
Technical Support Team
 
© 2011 Tbaytel, All rights reserved
 
*Tbaytel e-mail accounts will remain active as long as the primary account holder remains a Tbaytel
High Speed Internet subscriber in good standing.  An email account must be logged into at least once
per year in order to retain the address and contents of this account.

Using the e-mail forwarding option will ensure that your account is identified as active. Tbaytel
will conduct regular maintenance that will remove accounts that have been inactive for one year
or more. 

If you have any questions about this policy, please contact Tbaytel Technical Support at 684-3278
or 1-800-478-0879.

Leave a Reply

Blog & Social

Categories

Links

Search


Some of the technologies we utilize
Some of the web technologies used at TBayIT