Beware.....Phishing or virus?

Discuss Christopher Ward watches
User avatar
Kip
The Administrator
The Administrator
Posts: 35171
Joined: Tue Mar 13, 2007 8:45 pm
CW-watches: 150
LE-one: yes
LE-two: yes
LE-three: yes
LE-foura: yes
LE-fourb: yes
LE-five: yes
LE-six: yes
LESeven: yes
Location: New Hampshire, USA

Beware.....Phishing or virus?

Post by Kip »

Please beware should you get an email from Alex McKenzie from CW (see below). It has the subject of christopherward 5/3/2019

I am highly suspect that this a phishing email or a virus waiting to be unleashed. I have no idea of the source, but have notified our IT people to see what they can discover.
phishing (2).png
Kip

"Asylum Administrator"


Visit the CWArchives for everything CW. Historical, specs, manuals and resale. It is all there.
jtc
Senior Forumgod
Senior Forumgod
Posts: 4109
Joined: Fri Oct 05, 2012 9:50 pm
CW-watches: 2
Location: Hampshire, UK

Re: Beware.....Phishing or virus?

Post by jtc »

What url does the REVIEW DOCUMENT hyperlink lead to? A quick hover over any suspicious url usually reveals it to be phishing. Curious to know what the scammers are trying. Given your proximity to those at CW, this could be a targeted spear phishing attack.
Jon

Trusted Seller Feedback

CW | Tudor | Tag Heuer | Omega | Longines | Bremont | Rolex
BJH
Junior
Junior
Posts: 37
Joined: Sun Oct 19, 2014 7:57 pm
CW-watches: 18

Re: Beware.....Phishing or virus?

Post by BJH »

I got this last night and tried to open it. It went straight to my one drive so dumped it before going any further.
GMT_plus_One
Newbie
Newbie
Posts: 5
Joined: Fri May 03, 2019 6:28 pm
CW-watches: 1
Location: Germany

Re: Beware.....Phishing or virus?

Post by GMT_plus_One »

I got it as well.
It linked to a document at box.com which looked like a oneDrive screen.
If you click it, it opens a website named mediac.ga that tries to look like a oneDrive login screen.
Nothing really happened as I don’t have a oneDrive account.

Florian
mattjary
Senior
Senior
Posts: 148
Joined: Wed Jul 24, 2013 7:49 am
CW-watches: 25
Location: England

Re: Beware.....Phishing or virus?

Post by mattjary »

Received this yesterday, deleted it straight away as someone on the cwe Facebook page warned it was a virus.
User avatar
Essex Paul
Senior Forumgod
Senior Forumgod
Posts: 1084
Joined: Sun Sep 02, 2018 6:07 pm
CW-watches: 2

Re: Beware.....Phishing or virus?

Post by Essex Paul »

Thanks for the heads up.
C1 Grand Malvern Power Reserve
C65 Trident Diver Blue
User avatar
Amor Vincit Omnia
Moderator
Moderator
Posts: 33790
Joined: Sat Jun 11, 2011 7:34 pm
CW-watches: 4
Location: Norfolk, UK

Re: Beware.....Phishing or virus?

Post by Amor Vincit Omnia »

:problem: “Christopher uses box...”
Steve
Linguist; retired teacher; pilgrim; apprentice travel writer

Take nothing but pictures, leave nothing but footprints, kill nothing but time


Avoid loud and aggressive persons; they are vexatious to the spirit. (Max Ehrmann)
User avatar
magicman
Trusted Seller
Trusted Seller
Posts: 3878
Joined: Thu Jan 29, 2009 4:45 pm
CW-watches: 2
Location: Loughton, Essex

Re: Beware.....Phishing or virus?

Post by magicman »

Yes, got this too, and now deleted.

Thanks Steve
Selling Tudor Pelagos 39
goodjack
Junior
Junior
Posts: 40
Joined: Thu Jan 01, 2015 10:38 pm
CW-watches: 6
Location: New York, NY

Post by goodjack »

Also a big thanks!
AbstractAndy
Posts: 1
Joined: Mon Nov 19, 2012 7:56 pm

Re: Beware.....Phishing or virus?

Post by AbstractAndy »

Yep, another member with the phishing email....
I guess the worrying thing is that there must have been a data breach for the, ....can’t think of the technical term... oh yes “ jerk” to have got our email addresses. I wonder what other information they have had access to...payment card details, home address...?
Do please keep us updated CW.
User avatar
Kip
The Administrator
The Administrator
Posts: 35171
Joined: Tue Mar 13, 2007 8:45 pm
CW-watches: 150
LE-one: yes
LE-two: yes
LE-three: yes
LE-foura: yes
LE-fourb: yes
LE-five: yes
LE-six: yes
LESeven: yes
Location: New Hampshire, USA

Re: Beware.....Phishing or virus?

Post by Kip »

Our IT people have determined that this was definitely a phishing-email. As a result several emails were sent out via Alex's mailbox.

I have been assured that all has been done to mitigate against any risk/exposure both internally and externally.

There has been no security breach to any sensitive information whatsoever.

All you need do is to delete the email.
Kip

"Asylum Administrator"


Visit the CWArchives for everything CW. Historical, specs, manuals and resale. It is all there.
User avatar
MiniMpi
Trusted Seller
Trusted Seller
Posts: 37683
Joined: Sun Apr 10, 2011 9:56 am
CW-watches: 17
Location: Cork, Ireland

Re: Beware.....Phishing or virus?

Post by MiniMpi »

Thanks for the update Kip :thumbup: