WARNING - COMCAST/XFINITY users for internet or TV...phishing scam VERY REAL looking

[Eliot Rosewater]

Woke up this morning to an EMAIL from Xfinity (I thought) saying my router had been reset and I had to go in and change my network name and password.

This made no sense to me, but I almost did it by accident when I opened it on my phone as my pre-fill almost filled it in.

I called xfinity, told them the senders email and they said it wasnt theirs, but it was from something like alerts.comcast.com or a little longer, the whole think looked EXACTLY like Comcast.

As far as I know you would NEVER be told by Comcast or Xfinity that you have to CHANGE your network name or password. Had I done it of course they would now have my access info and with that I assume they would only want my credit card info...

Although that is the part I am confused about, what in my account could they use other than that?

I put this in GD because this is a real nasty one, looked perfect. I want everyone to know about it.

[CatWoman]

1. about a month ago, i got an email from Xfinity stating that my password had changed

I called them and as a precaution changed my password on their site.

[cry baby]

2. Thank you! nt

[Wounded Bear]

3. Great PSA, and thanks...

Only thing I get from them is my monthly "bill." I pay through my apt complex, so I basically just hit ignore.

It's always a good idea to not follow up on those kinds of emails. Most reputable companies won't send them. I get phishing (I assume) emails all the time requesting I "confirm my cancellation" to shit I've never heard of. Yeah, right. At best I figure it is just a mailer to send my email to 50 other bogus sites.

[2naSalit]

4. I got a strange email this am

I'm not affiliated with anything electronically except this site and my email. It had a name for a sender, no subject, with an attachment @aol. I haven't opened it, don't plan to. I don't recognize the name.

[Eliot Rosewater]

6. That is why this one is so scary, it looks identical to Xfinity emails and site.

[DENVERPOPS]

24. A scam telemarketer

is calling people in Denver saying they are Xcel energy and your utilities will be disconnected unless you give them payment info immediately. Official sounding and Caller ID reads Xcel energy and their phone #.

I have been getting these calls for a month, over and over.....

[mrsadm]

5. I got something similar from "Apple" a few days ago

asking me to click their link and enter my id and pw.

Please don't do ANYTHING that an email asks you to do, unless you call and verify. Or just ignore, even better.

[Zoonart]

11. Got this one too.

Went to apple and reported. These scams are getting more and more prevalentent and convincing.
Never follow an email link to reset your pass info.

[hlthe2b]

7. Bottom line, don't trust any email that looks official without hovering over the sender address

Most phishing emails will be quite obviously NOT from the parent company.

Then, ask if it is likely the company would email you out of the blue and demand personal identifying information.

answer: No, they don't and wouldn't. They will call you and give you the opportunity to verify who they are and likewise who you are with information only you and THEY) would know. And, they will not mind if you check out with a call of your own to verify who they are and that the call originated with the company.

I get tons of these because I have a primary email associated with a business.

Skepticism will "save" you.

[Eliot Rosewater]

12. I do that and this one had comcast in the email address...

I hovered over the hyperlinks in the body of the email and they also had comcast in it but was even less convincing.

I accidentally went to their site because I was on my phone and I hit the link, my phone wanted to prefill my log in , but i prevented it, but my phone thought it was comcast also...

i deleted and reported it as phishing...

[hlthe2b]

13. Just because it includes "comcast" does not mean anything... You have to look at the entire address

and there surely will be something very funky about it.

Not "[e-mail]" but something like "customerservicebrian@apple. xnvionton.com or .ca
or some other weird inclusion or suffix.

[Eliot Rosewater]

31. Yeah, this one was [e-mail] something like that...i deleted it and reported it as

phishing so I cant look at it again or if I can I dont want to and then accidentally do something LOL

[packman]

8. Another e-mail scam just recently added

"Claim your high intensity flashlight (Also - Ninja knife set, tactical special force knife, etc.). All you have to do is confirm your e-mail address and provide a credit card number to cover shipping costs.

[Blaukraut]

9. I've gotten emails from Amazon (payment declined) and Apple (a game charged to my account)

I knew they were scams because, first off, I hadn't bought anything from Amazon recently and my husband actually fell for the Apple one a month ago! Clicking on the link, it took him to what looked like the Apple site, where he attempted to cancel payment for the supposed charge. Once it made him put in all sorts of info, including his SSN to 'confirm', I told him to stop immediately and call one of the credit agencies to put a hold on any activity. (in his defense - he is not usually this gullible, but he had just had open heart surgery and wasn't quite himself yet).

So be really careful! These emails look real. They take you to sites that look authentic. (even the url looks ALMOST real). Bottom line: Never give out any info when prompted. Neither Xfinity nor Amazon or Apple will EVER ask you for passwords, SSN, credit card info (unless you're buying something).

[CatWoman]

10. i've gotten those as well

i googled and found them to be scams.

[BumRushDaShow]

14. If you get anything from Comcast/Xfinity - look for that little red "Xf" logo

Was digging for an example screenshot of that and the best I could find for now is in the below -



They use that to help verify it's from them and stick it at the beginning of their email subject. If I don't see it, I check the sender email address but normally throw it right into my spam folder.

[AllaN01Bear]

15. dont these people ever give up?

[James48]

17. No.

[keithbvadu2]

19. If they get one reply of information out of 5,000, they are making money from their scam.

If they get one reply of information out of 5,000, they are making money from their scam.

[roamer65]

27. No. The Russian gov't never lets up.

[Mme. Defarge]

16. Merci!

[Nictuku]

18. What in your account could be used?

Many (many many) people use the same password with various accounts and email. So once they have that info, there are many other ways they could get to steal your identity information.

The best advice I can give to folks is to /never/ use the same password for your email account that you use for banking and other accounts, such as your other accounts like comcast, banking, etc.

Once passwords and email are hacked, they can do a lot of damage to your economic status.

I use a particular password for banking, different password for all work-related things, a gmail account I just use with friends and family, and then I have a yahoo email account that I just use for signing up for things that require email verification.

Keeping track of passwords is a PITA, but protecting yourself is important.

[csziggy]

20. Good for you catching this!

I just got a call from "Apple" on my Verizon account Samsung cell phone warning me about suspicious activity on my iCloud account. I have never had an iCloud account, and the last Apple product I owned was an Apple ][e computer.

I wish it hadn't been a robocall so I could have jerked them around for a while. So I just blocked that number.

[question everything]

21. A good reminder. NEVER click on any link in email, or hit any phone button.

Always go to the organization directly. And am not even sure whether to go there via google search. Type the URL directly into the window.

[DanieRains]

22. The FBI Is Investigating Investigators Full Time Too Busy To Bust Phishing Scams

Barr is on the case!

Going after FBI Agents protecting us from RUSSIANS ATTACKING US.

You don't think they can find these phishing scumbags of they wanted to?

[Chipper Chat]

23. I just got a popup from Norton

Saying my Norton protection expired in 4 minutes. Said click here to renew. It was very official looking but my Norton doesnt expire until July so I knew it was a fake.

[Lexee]

32. I got that in a text this morning. I do not have Norton, lol.

[usaf-vet]

25. THIS IS THE KIND OF THING ONLY THE GOVERNMENT CAN FIX. We're seeing more and more of these......

.... Phishing attacks. Banks, credit card companies, cellphone providers are just a few of those businesses that are used to "phish" user names, passwords, and account numbers.

ONLY the government can attack this global cybersecurity issue.

[roamer65]

26. Check the sender email address on this stuff.

That is where the legitimate look usually stops.

[SWBTATTReg]

28. Reset your router? Yeah, right. I don't think some nefarious entity in email land can come...

in and just arbitrarily 'reset' your router, which is part of one's in house data network. Besides, resetting a router requires an ID (SSID) and password. Throwing these gee whiz terms to confuse people. More than likely when one gets emails like this, it's a attempt to get one to reveal their credit card number(s), etc.

[nevergiveup]

29. Wow! I received that email this morning

and deleted it without giving it a thought. I almost always (90%) delete emails from companies but there is that 1 in 10 that I open. Thanks for the warning as I will now be especially wary of emails from Xfinity.

[mntleo2]

30. TY for this warning. n/t

[Chipper Chat]

33. Congratulations! You have just won the Brooklyn bridge.

Your bid of $1 was drawn. It's yours! However the taxes of 412 dollars must be paid immediately or you will lose the bridge to the runner up bidder. Clivk here Please send $423 by Visa or master charge Click [e-mail] to get the bridge of a lifetime