Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




510 posts

Ultimate Geek
+1 received by user: 107


Topic # 165830 21-Feb-2015 23:36
Send private message

My brother in-law unfortunately answered the below email and then contacted me when he realised he had made a huge error. He had given them all his details; address, phones and credit card details. I immediately told him to cancel his cards, which he did. But because he has legitimised his email address he keeps receiving them. I myself have even been the recipient of these phishing emails this year.

On doing some research these emails are well known around the world so;

why isn't Spark/Yahoo security software blocking these emails????

I have included two such emails with different 'From' addresses but both saying essentially the same thing.

So far the 'From' addresses have been:

<accounts@icloud-messages.co.uk>
<helpdesk@appleigenius.eu>
<noreply@apple.com>

Spark get your act together or are you wanting us to fork out more money for your Security Suite. $95 for the basic and $150 for the premium. You should be on top of your game and adding and then automatically blocking KNOWN phishing addresses. This is appalling.

Cheers


To: **********@xtra.co.nz
Subject: iCloud Cancellation
Date: 1 February 2015 07:11:14 NZDT
From: "Apple Helpdesk" <accounts@icloud-messages.co.uk>
Reply-To: accounts@icloud-messages.co.uk

iCloud ID - **********@xtra.co.nz

This is the final notice to inform you as of 31 - January - 2015 that you have not yet updated your account information. Under "Know your Customer" legislation Apple Inc is required to perform a validation of your information, failure to do so will result in termination of your service in less than 48 hours.

To stop the termination of your Apple and iCloud please validate your account information before the deadline.

Please continue to Validate your iTunes Profile »

Case Your Reference: #R3BMN41116-A125

Sincerely,
Apple Inc.

My Apple ID | Support | Privacy Policy | Unsubscribe

Copyright © 2015 Apple Inc. 31-23, Rue Sainte Zithe, L-2763 Luxembourg‎ All Rights Reserved.

Since
-------------------------------------------------------------------------

To: ***********@xtra.co.nz
Subject: Your iCloud Cancellation
Date: 20 February 2015 05:18:57 NZDT
From: "iCloud Guru Support" <helpdesk@appleigenius.eu>
Reply-To: helpdesk@appleigenius.eu

Apple ID - **************@xtra.co.nz

This is the final notice to notify you as of 19 - February - 2015 that you have not yet updated your Apple ID information. Under "Know your Customer (KYC)" legislation Apple Inc is required by law to perform a verification of your Apple ID, failure to do so will result in deletion of your Apple ID and associated information in less than 48 hours.

Please continue to » Update your iTunes ID

To prevent the deletion of your Apple ID please you Apple ID information before the deadline.

Resolution Support Request ID: #K8AA11914-1358

Sincerely,
Apple Inc.




iMac 27" (late 2013), Airport Time Capsule + Airport Express, iPhone7, iPad6, iPad Mini2

 

Panasonic Blu-ray PVR DMR-BWT835 + Panasonic Viera TH-L50E6Z, Chromecast Ultra


Create new topic
4993 posts

Uber Geek
+1 received by user: 1327

Trusted
Microsoft

  Reply # 1243972 22-Feb-2015 00:03
Send private message

can you block them in your email client?

14442 posts

Uber Geek
+1 received by user: 1893


  Reply # 1243973 22-Feb-2015 00:04
3 people support this post
Send private message

It's a free service subcontracted out to yahoo, what do you expect. Get a gmail account, or purchase a paid email server where you can then get some accountability .

 
 
 
 


BDFL - Memuneh
61710 posts

Uber Geek
+1 received by user: 12383

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1243992 22-Feb-2015 08:16
4 people support this post
Send private message

I think it's unfair to go like this on a provider.

Spam filters are on a best basis and it's almost impossible to weed out all the fake emails while letting in the good ones. If too many are blocked with false positives people will complain of not receiving emails - and some people might have messages that could easily triggers a flag and block those.

Put in another way: if someone calls your brother-in-law saying it's from the bank or credit card and asking "Before we can proceed we need to identify you. Please tell us your access number and PIN..." would he give the number or tell the person he will call back on the bank's phone number in the back of the card?

People should be very alert when reading unsolicited messages. We have better capacity to filter out spam/scam than a computer has. In case your brother-in-law needs a Windows-based anti-spam (assuming he is not using a Mac), Spark offer FREE McAfee to every broadband user.






510 posts

Ultimate Geek
+1 received by user: 107


  Reply # 1244279 22-Feb-2015 17:42
Send private message

freitasm: I think it's unfair to go like this on a provider.

freitasm: People should be very alert when reading unsolicited messages. We have better capacity to filter out spam/scam than a computer has. In case your brother-in-law needs a Windows-based anti-spam (assuming he is not using a Mac), Spark offer FREE McAfee to every broadband user.

Yes my brother-in-law was foolish but he is a techno Luddite and I have been sorting out his Apple Mac based problems for years but my point is; if you google the above addresses, especially the first and third ones, you will find hundreds of reports, discussions & notices concerning these spam email addresses going back to at least Feb 2013, that is certainly time enough for Spark/Yahoo to add them to their Block list.

freitasm:We have better capacity to filter out spam/scam than a computer has.

When you say 'We' do you mean the Server side of things or the Home computer side. If you mean the Server side then the 'better capacity' is failing. If you mean the Home side and you are a MS Windows user, well what can I say, MS OS software have always needed security software installed and you are a fool if you do not install some. But in this case it is Apple OS. But operating systems aside, ISP's have the technology to filter these addresses and signatures out if their management is on the ball and clearly Spark/Yahoo email services are not.





iMac 27" (late 2013), Airport Time Capsule + Airport Express, iPhone7, iPad6, iPad Mini2

 

Panasonic Blu-ray PVR DMR-BWT835 + Panasonic Viera TH-L50E6Z, Chromecast Ultra


4993 posts

Uber Geek
+1 received by user: 1327

Trusted
Microsoft

  Reply # 1244284 22-Feb-2015 17:48
3 people support this post
Send private message

Apple users are not magically immune to malware. FWIW.



510 posts

Ultimate Geek
+1 received by user: 107


  Reply # 1244286 22-Feb-2015 17:55
Send private message

nathan: Apple users are not magically immune to malware. FWIW.

Yes I know. malware is dependant upon the user doing something stupid, like clicking on links, downloading software, media, from dodgy sites, etc.




iMac 27" (late 2013), Airport Time Capsule + Airport Express, iPhone7, iPad6, iPad Mini2

 

Panasonic Blu-ray PVR DMR-BWT835 + Panasonic Viera TH-L50E6Z, Chromecast Ultra


1551 posts

Uber Geek
+1 received by user: 603


  Reply # 1244292 22-Feb-2015 18:23
Send private message

FineWine:
nathan: Apple users are not magically immune to malware. FWIW.

Yes I know. malware is dependant upon the user doing something stupid, like clicking on links, downloading software, media, from dodgy sites, etc.


We can add buying a laptop form a Chinese company to that list now...

BDFL - Memuneh
61710 posts

Uber Geek
+1 received by user: 12383

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1244311 22-Feb-2015 18:47
One person supports this post
Send private message

FineWine:
freitasm: I think it's unfair to go like this on a provider.

freitasm: People should be very alert when reading unsolicited messages. We have better capacity to filter out spam/scam than a computer has. In case your brother-in-law needs a Windows-based anti-spam (assuming he is not using a Mac), Spark offer FREE McAfee to every broadband user.

Yes my brother-in-law was foolish but he is a techno Luddite and I have been sorting out his Apple Mac based problems for years but my point is; if you google the above addresses, especially the first and third ones, you will find hundreds of reports, discussions & notices concerning these spam email addresses going back to at least Feb 2013, that is certainly time enough for Spark/Yahoo to add them to their Block list.


Emails found on a search aren't added to blacklists. People need to report those emails to the provider, usually by clicking a button "This is spam". And even so, out of millions emails sent every hour, only one, two or hundred reports won't be enough to blacklist an email. Everyone needs to do their job by helping flagging emails that pass the filters.

FineWine:
freitasm:We have better capacity to filter out spam/scam than a computer has.

When you say 'We' do you mean the Server side of things or the Home computer side. If you mean the Server side then the 'better capacity' is failing.


By WE I mean WE, HUMANS. That's the last line of defence.

FineWine: If you mean the Home side and you are a MS Windows user, well what can I say, MS OS software have always needed security software installed and you are a fool if you do not install some. But in this case it is Apple OS. But operating systems aside, ISP's have the technology to filter these addresses and signatures out if their management is on the ball and clearly Spark/Yahoo email services are not.


Any OS has vulnerabilities. Don't think that just because someone is running Linux or OS X they're immune. The worst vulnerability is the human factor and the best defence is common sense.

Having the best anti-malware software in any platform won't help if someone click INSTALL | NEXT | NEXT | OK or fill an online form because of an email.









2527 posts

Uber Geek
+1 received by user: 939

Subscriber

  Reply # 1244338 22-Feb-2015 19:28
Send private message

I find the fact that someone would believe those messages on face value more appalling than the fact that thee ISP isn't automagically blocking emails you don't like. If these came in good ol' snail mail, and just went "Hey there, please send us some money, thanks. From Apple." would it be NZ Posts fault when you got duped? And as soon as an email that someone *wanted* to receive is blocked, it's all "OMG THEY ARE TOO STRICT ON SPAMM!11onEONE!".




Windows 7 x64 // i5-3570K // 16GB DDR3-1600 // GTX660Ti 2GB // Samsung 830 120GB SSD // OCZ Agility4 120GB SSD // Samsung U28D590D @ 3840x2160 & Asus PB278Q @ 2560x1440
Samsung Galaxy S5 SM-G900I w/Spark

4349 posts

Uber Geek
+1 received by user: 2644

Lifetime subscriber

  Reply # 1244446 22-Feb-2015 21:25
Send private message

Inphinity: I find the fact that someone would believe those messages on face value more appalling than the fact that thee ISP isn't automagically blocking emails you don't like. ...


"Techno-Luddites" may be less likely to realise that legit IT companies/banks don't send our messages like this.
To a Geekzoner this would be blindingly obvious.
But most people are not Geekzoners.
Phishers only need one person in a thousand to fall for it ...




Sideface


BDFL - Memuneh
61710 posts

Uber Geek
+1 received by user: 12383

Administrator
Trusted
Geekzone
Lifetime subscriber

1931 posts

Uber Geek
+1 received by user: 380

Subscriber

  Reply # 1244608 23-Feb-2015 09:44
Send private message

No good blasting Yahoo here. For heavens sake, tell/force your BIL to switch to a gmail account as their spam filter is very very good (note I didn't say infallible!).

After that, give him Mauricio's advice. We really are the last line of defence.

But I also know about your frustration with trying to help with these events having recently had to clean a friend's comp after he let the nice helpful Indian man 'fix' his computer!







510 posts

Ultimate Geek
+1 received by user: 107


  Reply # 1244638 23-Feb-2015 10:25
Send private message

After doing some research within Spark website, that was not easy ended up using the search term 'report spam emails' I came across this page 'Stop spam downloading to your mail client' and here 'Yahoo Xtra Mail - Troubleshooting'

The first links instructions need to be updated they are wrong. I did send feed back. I also sent a copy of my spam email as per the second link.

As the first links instructions are incorrect I sent my own instructions to my B-I-L.

I still get back to my first observation that these spam addresses have been around for a while and should already be known to Spark/Yahoo. My new observation is that on the Spark page/s there is no obvious or easy way to report these spam addresses ESPECIALLY if you are not email/internet savvy.




iMac 27" (late 2013), Airport Time Capsule + Airport Express, iPhone7, iPad6, iPad Mini2

 

Panasonic Blu-ray PVR DMR-BWT835 + Panasonic Viera TH-L50E6Z, Chromecast Ultra


2894 posts

Uber Geek
+1 received by user: 311


  Reply # 1244643 23-Feb-2015 10:37
Send private message

As its outsourced to Yahoo, the only way to report, is use their designed apps (which push nasty dating messages etc in between legitimate ones) and click the this is spam button, or drop your client and predominantly use webmail.

1592 posts

Uber Geek
+1 received by user: 367


  Reply # 1244671 23-Feb-2015 11:33
Send private message

freitasm: I think it's unfair to go like this on a provider.



Unless its justified.
Yahoo/extra spam filtering is appaulingly bad. Has been since day 1

I have the issue of it blocking legit emails.
Can the yahoo/xtra spam Filter be turned off: NO !!! (why not)

But I agree, no spam filter will catch all spam .


Reporting new spam email really does not help. You may stop a single spammer (perhaps), but it wont stop the next one or the one after that.


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.