I maintain the email filtering software at my place of work and noticed a number of emails supposedly from O2 Customer Care had been blocked. On checking the emails I noticed that they are indeed fake and by clicking on the link in the email and entering your details, you will give someone else access to your account.
Anyway, the email:
Althought the email appears to come from "shops.usero2@o2.co.uk" it is actually from "nobody@server64.nt100.datacenter.ni.net.tr".
If you click on the link in the email, it takes you to a malicious website (edited out link) which will ask you to enter your O2 username and password. DO NOT CLICK ON THE LINK!
The easy way to protect yourself from phishing emails like this is to remember the following:
- If you do not know the sender of an unsolicited email message, delete it
- Never respond to any spam messages or click on any links in the message
- Companies like O2 will never ask you click on a link to then enter your username and password
I hope this helps protect someone! But it could also be why we may have seen an increase in hacked O2 accounts...
- 24229 Posts
- 1055 Topics
- 3802 Solutions
Good heads up, PapaDug. Thanks.
- 150574 Posts
- 645 Topics
- 28683 Solutions
@Anonymous wrote:
I'll bet that lot over the pond operating PRISM aren't monitoring server64.nt100.datacenter.ni.net.tr
Bet their monitoring you now for saying that!!!! 
Just recieved a fresh batch of O2 Phishing emails into work today!
Email comes in looking like this:
Suspicious looking on its own! But on clicking the link, it takes you to a fake sign in page, although the address bar shows the completely wrong address and there are errors on the page:
If you enter your username and password then click on the Sign In button it takes you to the O2.co.uk homepage and your username and password will have been saved somewhere for the scammers to use.
Please everyone be very very careful when checking yoru emails from any organisation you deal with. Most organisations wont ask you to click on a link to login, but if they do, always check the address bar to make sure you are on the correct site, or dont click on the link and go to the site yourself in your browser.
These emails have now been sent to Phishing@O2.com
