HomeLatest ThreadsGreatest ThreadsForums & GroupsMy SubscriptionsMy Posts
DU Home » Latest Threads » Forums & Groups » Main » General Discussion (Forum) » WARNING - COMCAST/XFINIT...

Tue Dec 24, 2019, 11:41 AM

WARNING - COMCAST/XFINITY users for internet or TV...phishing scam VERY REAL looking

Woke up this morning to an EMAIL from Xfinity (I thought) saying my router had been reset and I had to go in and change my network name and password.

This made no sense to me, but I almost did it by accident when I opened it on my phone as my pre-fill almost filled it in.

I called xfinity, told them the senders email and they said it wasnt theirs, but it was from something like alerts.comcast.com or a little longer, the whole think looked EXACTLY like Comcast.

As far as I know you would NEVER be told by Comcast or Xfinity that you have to CHANGE your network name or password. Had I done it of course they would now have my access info and with that I assume they would only want my credit card info...

Although that is the part I am confused about, what in my account could they use other than that?

I put this in GD because this is a real nasty one, looked perfect. I want everyone to know about it.

33 replies, 4321 views

Reply to this thread

Back to top Alert abuse

Always highlight: 10 newest replies | Replies posted after I mark a forum
Replies to this discussion thread
Arrow 33 replies Author Time Post
Reply WARNING - COMCAST/XFINITY users for internet or TV...phishing scam VERY REAL looking (Original post)
Eliot Rosewater Dec 2019 OP
CatWoman Dec 2019 #1
cry baby Dec 2019 #2
Wounded Bear Dec 2019 #3
2naSalit Dec 2019 #4
Eliot Rosewater Dec 2019 #6
DENVERPOPS Dec 2019 #24
mrsadm Dec 2019 #5
Zoonart Dec 2019 #11
hlthe2b Dec 2019 #7
Eliot Rosewater Dec 2019 #12
hlthe2b Dec 2019 #13
Eliot Rosewater Dec 2019 #31
packman Dec 2019 #8
Blaukraut Dec 2019 #9
CatWoman Dec 2019 #10
BumRushDaShow Dec 2019 #14
AllaN01Bear Dec 2019 #15
James48 Dec 2019 #17
keithbvadu2 Dec 2019 #19
roamer65 Dec 2019 #27
Mme. Defarge Dec 2019 #16
Nictuku Dec 2019 #18
csziggy Dec 2019 #20
question everything Dec 2019 #21
DanieRains Dec 2019 #22
Chipper Chat Dec 2019 #23
Lexee Dec 2019 #32
usaf-vet Dec 2019 #25
roamer65 Dec 2019 #26
SWBTATTReg Dec 2019 #28
nevergiveup Dec 2019 #29
mntleo2 Dec 2019 #30
Chipper Chat Dec 2019 #33

Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 11:45 AM

1. about a month ago, i got an email from Xfinity stating that my password had changed

I called them and as a precaution changed my password on their site.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 11:46 AM

2. Thank you! nt

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 11:47 AM

3. Great PSA, and thanks...

Only thing I get from them is my monthly "bill." I pay through my apt complex, so I basically just hit ignore.

It's always a good idea to not follow up on those kinds of emails. Most reputable companies won't send them. I get phishing (I assume) emails all the time requesting I "confirm my cancellation" to shit I've never heard of. Yeah, right. At best I figure it is just a mailer to send my email to 50 other bogus sites.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 11:50 AM

4. I got a strange email this am

I'm not affiliated with anything electronically except this site and my email. It had a name for a sender, no subject, with an attachment @aol. I haven't opened it, don't plan to. I don't recognize the name.




Reply to this post

Back to top Alert abuse Link here Permalink


Response to 2naSalit (Reply #4)

Tue Dec 24, 2019, 11:51 AM

6. That is why this one is so scary, it looks identical to Xfinity emails and site.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Reply #6)

Tue Dec 24, 2019, 01:10 PM

24. A scam telemarketer

is calling people in Denver saying they are Xcel energy and your utilities will be disconnected unless you give them payment info immediately. Official sounding and Caller ID reads Xcel energy and their phone #.

I have been getting these calls for a month, over and over.....

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 11:51 AM

5. I got something similar from "Apple" a few days ago

asking me to click their link and enter my id and pw.

Please don't do ANYTHING that an email asks you to do, unless you call and verify. Or just ignore, even better.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to mrsadm (Reply #5)

Tue Dec 24, 2019, 12:09 PM

11. Got this one too.

Went to apple and reported. These scams are getting more and more prevalentent and convincing.
Never follow an email link to reset your pass info.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 11:53 AM

7. Bottom line, don't trust any email that looks official without hovering over the sender address

Most phishing emails will be quite obviously NOT from the parent company.

Then, ask if it is likely the company would email you out of the blue and demand personal identifying information.

answer: No, they don't and wouldn't. They will call you and give you the opportunity to verify who they are and likewise who you are with information only you and THEY) would know. And, they will not mind if you check out with a call of your own to verify who they are and that the call originated with the company.

I get tons of these because I have a primary email associated with a business.

Skepticism will "save" you.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to hlthe2b (Reply #7)

Tue Dec 24, 2019, 12:11 PM

12. I do that and this one had comcast in the email address...

I hovered over the hyperlinks in the body of the email and they also had comcast in it but was even less convincing.

I accidentally went to their site because I was on my phone and I hit the link, my phone wanted to prefill my log in , but i prevented it, but my phone thought it was comcast also...

i deleted and reported it as phishing...

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Reply #12)

Tue Dec 24, 2019, 12:17 PM

13. Just because it includes "comcast" does not mean anything... You have to look at the entire address

and there surely will be something very funky about it.

Not "[email protected]" but something like "[email protected] xnvionton.com or .ca
or some other weird inclusion or suffix.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to hlthe2b (Reply #13)

Tue Dec 24, 2019, 02:53 PM

31. Yeah, this one was [email protected] something like that...i deleted it and reported it as

phishing so I cant look at it again or if I can I dont want to and then accidentally do something LOL

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:01 PM

8. Another e-mail scam just recently added

"Claim your high intensity flashlight (Also - Ninja knife set, tactical special force knife, etc.). All you have to do is confirm your e-mail address and provide a credit card number to cover shipping costs.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:02 PM

9. I've gotten emails from Amazon (payment declined) and Apple (a game charged to my account)

I knew they were scams because, first off, I hadn't bought anything from Amazon recently and my husband actually fell for the Apple one a month ago! Clicking on the link, it took him to what looked like the Apple site, where he attempted to cancel payment for the supposed charge. Once it made him put in all sorts of info, including his SSN to 'confirm', I told him to stop immediately and call one of the credit agencies to put a hold on any activity. (in his defense - he is not usually this gullible, but he had just had open heart surgery and wasn't quite himself yet).

So be really careful! These emails look real. They take you to sites that look authentic. (even the url looks ALMOST real). Bottom line: Never give out any info when prompted. Neither Xfinity nor Amazon or Apple will EVER ask you for passwords, SSN, credit card info (unless you're buying something).

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Blaukraut (Reply #9)

Tue Dec 24, 2019, 12:04 PM

10. i've gotten those as well

i googled and found them to be scams.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:23 PM

14. If you get anything from Comcast/Xfinity - look for that little red "Xf" logo

Was digging for an example screenshot of that and the best I could find for now is in the below -



They use that to help verify it's from them and stick it at the beginning of their email subject. If I don't see it, I check the sender email address but normally throw it right into my spam folder.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:26 PM

15. dont these people ever give up?

Reply to this post

Back to top Alert abuse Link here Permalink


Response to AllaN01Bear (Reply #15)

Tue Dec 24, 2019, 12:34 PM

17. No.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to AllaN01Bear (Reply #15)

Tue Dec 24, 2019, 12:42 PM

19. If they get one reply of information out of 5,000, they are making money from their scam.

If they get one reply of information out of 5,000, they are making money from their scam.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to AllaN01Bear (Reply #15)

Tue Dec 24, 2019, 01:40 PM

27. No. The Russian gov't never lets up.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:27 PM

16. Merci!

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:41 PM

18. What in your account could be used?

Many (many many) people use the same password with various accounts and email. So once they have that info, there are many other ways they could get to steal your identity information.

The best advice I can give to folks is to /never/ use the same password for your email account that you use for banking and other accounts, such as your other accounts like comcast, banking, etc.

Once passwords and email are hacked, they can do a lot of damage to your economic status.

I use a particular password for banking, different password for all work-related things, a gmail account I just use with friends and family, and then I have a yahoo email account that I just use for signing up for things that require email verification.

Keeping track of passwords is a PITA, but protecting yourself is important.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:47 PM

20. Good for you catching this!

I just got a call from "Apple" on my Verizon account Samsung cell phone warning me about suspicious activity on my iCloud account. I have never had an iCloud account, and the last Apple product I owned was an Apple ][e computer.

I wish it hadn't been a robocall so I could have jerked them around for a while. So I just blocked that number.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:52 PM

21. A good reminder. NEVER click on any link in email, or hit any phone button.

Always go to the organization directly. And am not even sure whether to go there via google search. Type the URL directly into the window.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:55 PM

22. The FBI Is Investigating Investigators Full Time Too Busy To Bust Phishing Scams

Barr is on the case!

Going after FBI Agents protecting us from RUSSIANS ATTACKING US.

You don't think they can find these phishing scumbags of they wanted to?

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 12:57 PM

23. I just got a popup from Norton

Saying my Norton protection expired in 4 minutes. Said click here to renew. It was very official looking but my Norton doesnt expire until July so I knew it was a fake.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Chipper Chat (Reply #23)

Tue Dec 24, 2019, 02:55 PM

32. I got that in a text this morning. I do not have Norton, lol.

 

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 01:25 PM

25. THIS IS THE KIND OF THING ONLY THE GOVERNMENT CAN FIX. We're seeing more and more of these......

.... Phishing attacks. Banks, credit card companies, cellphone providers are just a few of those businesses that are used to "phish" user names, passwords, and account numbers.

ONLY the government can attack this global cybersecurity issue.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 01:38 PM

26. Check the sender email address on this stuff.

That is where the legitimate look usually stops.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 01:41 PM

28. Reset your router? Yeah, right. I don't think some nefarious entity in email land can come...

in and just arbitrarily 'reset' your router, which is part of one's in house data network. Besides, resetting a router requires an ID (SSID) and password. Throwing these gee whiz terms to confuse people. More than likely when one gets emails like this, it's a attempt to get one to reveal their credit card number(s), etc.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 01:47 PM

29. Wow! I received that email this morning

and deleted it without giving it a thought. I almost always (90%) delete emails from companies but there is that 1 in 10 that I open. Thanks for the warning as I will now be especially wary of emails from Xfinity.

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 02:37 PM

30. TY for this warning. n/t

Reply to this post

Back to top Alert abuse Link here Permalink


Response to Eliot Rosewater (Original post)

Tue Dec 24, 2019, 07:01 PM

33. Congratulations! You have just won the Brooklyn bridge.

Your bid of $1 was drawn. It's yours! However the taxes of 412 dollars must be paid immediately or you will lose the bridge to the runner up bidder. Clivk here Please send $423 by Visa or master charge Click [email protected] to get the bridge of a lifetime

Reply to this post

Back to top Alert abuse Link here Permalink

Reply to this thread