email from idnet

[jane]

Sorry if this sounds paranoid but I have just received an email purportedly from idnet requiring me to enter my username and password. The spelling mistakes in it make me suspicious. Has anyone else got one of these?
Jane

[pctech]

Chances are its not from them, indeed I'd 100% say its not from them.

[Glenn]

If it is asking for account details, then I would say it's a scam.

[.Griff.]

What's the original header of the email?

[zappaDPJ]

It certainly sounds like a scam to me, I can't see any reason at all why IDNet would ask for that information as they already have it. If there's a URL contained within the email, I'd strongly advise you NOT to click it.

[jane]

Thanks, as I suspected then. Here's what it says (my deatils deleted of course)

Return-Path: <helpdesk@idnet.com>
Delivered-To:Received: from mailfilter1.idnet.net (mailfilter1.idnet.net [212.69.36.213])
   by mail.idnet.com (Postfix) with ESMTP id 1CA283A471F
   for <***>; Sat, 20 Nov 2010 16:31:09 +0000 (GMT)
Received: from localhost (unknown [127.0.0.1])
   by mailfilter1.idnet.net (Postfix) with ESMTP id 3EDEE981CA
   for <***>; Sat, 20 Nov 2010 16:30:12 +0000 (UTC)
X-Virus-Scanned: amavisd-new at idnet.com
X-Spam-Flag: NO
X-Spam-Score: 2.795
X-Spam-Level: **
X-Spam-Status: No, score=2.795 tagged_above=0 required=6 tests=[BAYES_00=-1.9,
   FREEMAIL_FORGED_REPLYTO=2.095, FREEMAIL_REPLYTO_END_DIGIT=1.151,
   RCVD_IN_BRBL_LASTEXT=1.449] autolearn=unavailable
Received: from mailfilter1.idnet.net ([127.0.0.1])
   by localhost (mailfilter1.idnet.net [127.0.0.1]) (amavisd-new, port 10040)
   with LMTP id Z2mlhnVRn712 for <removed - Rik>;
   Sat, 20 Nov 2010 16:30:12 +0000 (GMT)
Received: from mx1.idnet.net (mx1.idnet.net [212.69.36.17])
   by mailfilter1.idnet.net (Postfix) with ESMTP id 1A27C97A5E
   for <****>; Sat, 20 Nov 2010 16:30:12 +0000 (GMT)
X-Greylist: from auto-whitelisted by SQLgrey-1.6.8
Received: from btsskynet.net (mail.btsskynet.net [74.5.204.249])
   by mx1.idnet.net (Postfix) with SMTP id 4734053B98
   for <>; Sat, 20 Nov 2010 16:31:07 +0000 (GMT)
Received: (qmail 12791 invoked by uid 453); 20 Nov 2010 16:24:17 -0000
X-Virus-Checked: Checked by ClamAV on btsskynet.net
Received: from localhost (HELO localhost) (127.0.0.1)
   by btsskynet.net (qpsmtpd/0.40) with ESMTP; Sat, 20 Nov 2010 10:24:17 -0600
Received: from 41.138.184.9 ([41.138.184.9]) by mail.btsskynet.net (Horde
Framework) with HTTP; Sat, 20 Nov 2010 10:24:15 -0600
Message-ID: <20101120102415.69964p987v6mprms@mail.btsskynet.net>
Date: Sat, 20 Nov 2010 10:24:15 -0600
From: "Idnet.com Support Team" <helpdesk@idnet.com>
Reply-to: verification.teams77@hotmail.com
To: undisclosed-recipients:;
Subject: Account  Upgrade
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.5)



Dear Idnet.com Subscriber,

We are currently carrying-out a  maintenance
process to your Idnet.com account, to complete
this, you must reply to this mail immediately,
and enter your User Name here (,,,,,,,,) And
Password here (.......)  if you are the
rightful owner of this account.

This process we help us to fight against
spam mails.Failure to summit your password,
will render your email address in-active
from our database.

NOTE: If your have done this before, you may ignore
this mail. You will be send a password reset
messenge in next seven (7) working days after
undergoing this process for security reasons.

Thank you for using Idnet.com!
THE Idnet.com  TEAM




Jane

Personal details removed - Rik

[Rik]

Scam, an IDNet email wouldn't have a hotmail address in it, Jane.

[jane]

Thank a lot. Be interesting to see if anyone else gets one.

Cheers

Jane

[Rik]

I've alerted support - thanks for letting us know. 

[Baz]

oppsss


yes my daughter has one.

Apologies to Rik about the PM for this,I should read the forum first. 

the Hotmail addy is a giveaway.

[Rik]

Plus IDNet don't use the idnet.com form of address, nor do they send to undisclosed recipients, all email would be one to one.

[DorsetBoy]

The last 3 entries on this search page are rather interesting

  http://www.google.co.uk/search?client=opera&rls=en&q=verification.teams77@hotmail.com&sourceid=opera&ie=utf-8&oe=utf-8

[jrboden]

Hi all just had this mail via my idnet email account 

Hi just had this email!!! perhaps warn your other customers about this!!!

"--------------------------------------------------
From: "Idnet.com Support Team" <helpdesk@idnet.com>
Sent: Saturday, November 20, 2010 4:24 PM
To: "undisclosed-recipients:"
Subject: Account  Upgrade

>
>
> Dear Idnet.com Subscriber,
>
> We are currently carrying-out a  maintenance
> process to your Idnet.com account, to complete
> this, you must reply to this mail immediately,
> and enter your User Name here (,,,,,,,,) And
> Password here (.......)  if you are the
> rightful owner of this account.
>
> This process we help us to fight against
> spam mails.Failure to summit your password,
> will render your email address in-active
> from our database.
>
> NOTE: If your have done this before, you may ignore
> this mail. You will be send a password reset
> messenge in next seven (7) working days after
> undergoing this process for security reasons.
>
> Thank you for using Idnet.com!
> THE Idnet.com  TEAM
>
>
>
>
>
>
>
> -----
> No virus found in this message.
> Checked by AVG - www.avg.com
> Version: 10.0.1153 / Virus Database: 424/3267 - Release Date: 11/19/10
>

The sender was verification.teams77@hotmail.com<verification.teams77@hotmail.com>;


I work in "IT" so seen it all before but some may fall for it - IDNET not sure if I was the only target so pleasd warn your customers!!!

[Rik]

Thanks, merged with existing thread.

[Technical Ben]

Wow. How do they know your with... oh wait. IDNet customers have "@idnet" addresses. Naturally. So it's a fishing expedition. Thanks for the heads up.

[Simon_idnet]

Wow. How do they know your with... oh wait. IDNet customers have "@idnet" addresses. Naturally. So it's a fishing expedition. Thanks for the heads up.

It's known as "Spear Phishing"

[Rik]

Why Spear, Simon?

[Simon]

http://www.microsoft.com/protect/fraud/phishing/symptoms.aspx

[Rik]

It's great having two Simons.

[Glenn]

Why Spear, Simon?

More precise than trawling?

[Rik]

You've got me hooked, go on.

[Simon]

You mean, you don't get the point?

[Rik]

No, it must be the 'net.

[Baz]

update on this.seems my daughter has had another email about it calling it ' Final Notification '

Dear Idnet.com Subscriber,

We are currently carrying-out a  maintenance process to your Idnet.com
account, to complete this, you must reply to this mail immediately, and
enter your User Name here (,,,,,,,,) And Password here (.......)  if you
are the rightful owner of this account.

This process we help us to fight against spam mails.Failure to summit your
password,will render your email address in-active from our database.

NOTE: If your have done this before, you may ignore this mail. You will be
send a password reset messenge in next seven (7)working days after
undergoing this process for security reasons.

Thank you for using Idnet.com!
THE Idnet.com TEAM

[Rik]

Fairly standard 'push', Baz. Let's just hope no-one takes it as genuine.