Phishing scam

Forums › Desktop computing › Phishing scam

Lightbulb

69 posts

Master Geek

Lifetime subscriber

#157109 19-Nov-2014 22:36

Just received an email from someone I know which included the line "XXXXX used Google drive to share Secured File with you securely!"

I'm normally very careful when it comes to things like this, but after a long day I clicked on the link in the email and was asked for my email address, phone number and gmail password.

After I'd entered email address and phone number, I realised it for what it was and didn't enter my password - whew...

So, concern now is whether I'm at risk for anything with someone knowing my gmail address and cell phone number. And what should I do, if anything...

Link clicked on was: thirugroups.in/see/document

thanks

adida101

121 posts

Master Geek

#1179899 20-Nov-2014 00:05

Did you click on 'submit' or equivalent? If not then you don't need to worry.

ckc

321 posts

Ultimate Geek
Inactive user

#1179901 20-Nov-2014 00:13

"XXXXX used Google drive to share Secured File with you securely!"

Such grammar. So tautology.

Hope you told your friend he has a worm.

Lightbulb

69 posts

Master Geek

Lifetime subscriber

#1179927 20-Nov-2014 07:42

adida101: Did you click on 'submit' or equivalent? If not then you don't need to worry.

What happened was

Clicked on link in email
Went to website where I was asked to input gmail address.
Entered address, clicked next
Then entered cell phone no, clicked next
Stopped when asked to enter password

So, have given away email address and cell phone no
Password is a very complex one

Am I at risk - other than more spam into my gmail address?

DarthKermit

5312 posts

Uber Geek

Trusted

#1179958 20-Nov-2014 09:20

I keep getting emails saying that my email account has exceeded its quota and it'll be deleted in 72 hours if I don't respond. Yeah...

Whatifthespacekeyhadneverbeeninvented?

timmmay

16536 posts

Uber Geek

Trusted

Subscriber

#1179968 20-Nov-2014 09:31

Your spam may increase slightly (email and perhaps phone) due to perceived gullibility, but I don't believe you're at any more risk than you were before.

1101

2318 posts

Uber Geek

#1179994 20-Nov-2014 10:42

Lightbulb:
adida101: Did you click on 'submit' or equivalent? If not then you don't need to worry.

What happened was

Clicked on link in email
Went to website where I was asked to input gmail address.
Entered address, clicked next
Then entered cell phone no, clicked next
Stopped when asked to enter password

So, have given away email address and cell phone no
Password is a very complex one

Am I at risk - other than more spam into my gmail address?

Yes , the scammers now have your email gmail name & ph no.
Risk is minimal though .
I would be more worried about picking up malware from clicking on the scammers links.

Lightbulb

69 posts

Master Geek

Lifetime subscriber

#1180000 20-Nov-2014 10:50

1101:
Lightbulb:
adida101: Did you click on 'submit' or equivalent? If not then you don't need to worry.

What happened was

Clicked on link in email
Went to website where I was asked to input gmail address.
Entered address, clicked next
Then entered cell phone no, clicked next
Stopped when asked to enter password

So, have given away email address and cell phone no
Password is a very complex one

Am I at risk - other than more spam into my gmail address?

Yes , the scammers now have your email gmail name & ph no.
Risk is minimal though .
I would be more worried about picking up malware from clicking on the scammers links.

Thanks - can you recommend some good (free) software to scan for malware. I have MSE installed as virus checker, but that's all

timmmay

16536 posts

Uber Geek

Trusted

Subscriber

#1180012 20-Nov-2014 11:27

Malware Bytes (free). I use to use Spybot Search and Destroy but it wants to be resident and take over. Also Avast! free antivirus is in my opinion the best free offering right now, which is backed up by whatever studies I looked at a few months back.

sidefx

3508 posts

Uber Geek

Trusted

#1180062 20-Nov-2014 12:27

adida101: Did you click on 'submit' or equivalent? If not then you don't need to worry.

Even without clicking submit\etc they could've use javascript\ajax\etc to get what was typed in. (irrelevant given the info given later in the thread I know, but still worth remembering - and more scary when combined with xss)

"I was born not knowing and have had only a little time to change that here and there." | Electric Kiwi | Sharesies
- Richard Feynman

BTR

1522 posts

Uber Geek

#1180094 20-Nov-2014 13:32

Have had a spate of these emails come trough work, the first instance caused a massive headache for me and my staff as 200+ users needed their passwords changed. Since then users have be reminded to pay more attention to the emails they receive and the URL's are blocked as soon as my dept becomes aware of them.

One of the dead give aways on these sites is you can enter your Google, Hotmail, AOL or Facebook password into the fields supposedly.

My advice is pay more attention to what your reading and you will be fine.