Fraud email

[Anonymous]

Hi all,

I have received an email with the sender as "O2 UK". The email is about an EU law is changed so that O2 is due to refund us some money, than it asked you click here and take you to an login page where you need to input your "username" and "password".

DON'T DO IT.....

I have reported this to O2 now..

However, what concern me is that how can they get hold of my personal details and price plan and the eact amount I am paying....

Really concern me with the whole O2 security...

[MI5]

There are many threads already running on here - you aren't the only one unfortunately......

[Toby]

Hi Spiderman,

Sorry to hear you've seen this happening. Please see my post in the below link for some related info.

http://community.o2.co.uk/t5/Other-Products-Services/Scam-warning-received-this-email-requests-all-b...

[Anonymous]

You have actioned all you can do at this our end by reporting the phishing email.

If you know any family , friends and colleagues who are also on O2 Contracts you could let them know of this ongoing situation.

[viridis]

---

@Toby wrote:
Hi Spiderman,

Sorry to hear you've seen this happening. Please see my post in the below link for some related info.

http://community.o2.co.uk/t5/Other-Products-Services/Scam-warning-received-this-email-requests-all-b...

---

Toby, with the greatest respect I think that the official response quoted in that link is now proven to be false.

This is not a keylogger, nor is it malware on an end users machine.

The only possible way it could be either of those, is if the malware or keylogger originated from O2 servers.

No other networks have this issue. 

No banks suddenly noticing an increase in phishing.

If this was a generic keylogger then other networks at least, and banks would also be getting an increase.

Also, keyloggers do not work on ipads, chrome autofill and accounts not logged into for 6 years.

[Toby]

HI @viridis ,

This is the info that I have at the moment and shall be providing more info when I can

[Beenherebefore]

---

@Toby wrote:
Hi Spiderman,

Sorry to hear you've seen this happening. Please see my post in the below link for some related info.

http://community.o2.co.uk/t5/Other-Products-Services/Scam-warning-received-this-email-requests-all-b...

---

If O2 are standing by this original incorrect statement then I regret that they will be in serious trouble with ICO.

This is the second serious release of data.....I think 2011 was the previous incident.....so the regulators will not be in a good mood after this latest incident, however it may have been caused.

[Toby]

Hi guys,

I'll share your thoughts here with the rest of the team.

[Anonymous]

I think that o2 should consider restricting access to online accounts with immediate effect and forcing users to update their passwords from a secure pc or phone environment.

Damage limitation before the ICO get involved, issue large fines that we as customers end up effectively paying for.

[Cleoriff]

I think we all understood O2 would be giving out a 'party line' statement...

However, this is really no help to people whose accounts could be compromised whilst a 'party line statement' is being issued.

We have members on this forum who are immensely tech savvy (as beenherebefore and viridis have shown)

Statements such as those being made by O2 are not reassuring me at all.

A well known phrase springs to mind.'Nero fiddled while Rome burned'