Beware.....Phishing or virus?

Discuss Christopher Ward watches
Post Reply
User avatar
Kip
The Administrator
The Administrator
Posts: 29744
Joined: Tue Mar 13, 2007 8:45 pm
CW-watches: 146
LE-one: yes
LE-two: yes
LE-three: yes
LE-foura: yes
LE-fourb: yes
LE-five: yes
LE-six: yes
LESeven: yes
Location: New Hampshire, USA

Beware.....Phishing or virus?

Post by Kip » Fri May 03, 2019 11:20 pm

Please beware should you get an email from Alex McKenzie from CW (see below). It has the subject of christopherward 5/3/2019

I am highly suspect that this a phishing email or a virus waiting to be unleashed. I have no idea of the source, but have notified our IT people to see what they can discover.
phishing (2).png
Kip

"Asylum Administrator"

Image

jtc
Senior Forumgod
Senior Forumgod
Posts: 3005
Joined: Fri Oct 05, 2012 9:50 pm
CW-watches: 1
Location: Hampshire, UK

Re: Beware.....Phishing or virus?

Post by jtc » Sat May 04, 2019 1:10 am

What url does the REVIEW DOCUMENT hyperlink lead to? A quick hover over any suspicious url usually reveals it to be phishing. Curious to know what the scammers are trying. Given your proximity to those at CW, this could be a targeted spear phishing attack.
Jon

Sales Corner Feedback

CW | Tudor | Tag Heuer | Omega | Halios | Oris | Seiko | Casio

BJH
Newbie
Newbie
Posts: 7
Joined: Sun Oct 19, 2014 7:57 pm
CW-watches: 12

Re: Beware.....Phishing or virus?

Post by BJH » Sat May 04, 2019 8:22 am

I got this last night and tried to open it. It went straight to my one drive so dumped it before going any further.

GMT_plus_One
Newbie
Newbie
Posts: 5
Joined: Fri May 03, 2019 6:28 pm
CW-watches: 1
Location: Germany

Re: Beware.....Phishing or virus?

Post by GMT_plus_One » Sat May 04, 2019 8:35 am

I got it as well.
It linked to a document at box.com which looked like a oneDrive screen.
If you click it, it opens a website named mediac.ga that tries to look like a oneDrive login screen.
Nothing really happened as I don’t have a oneDrive account.

Florian

mattjary
Senior
Senior
Posts: 66
Joined: Wed Jul 24, 2013 7:49 am
CW-watches: 6
Location: England

Re: Beware.....Phishing or virus?

Post by mattjary » Sat May 04, 2019 1:31 pm

Received this yesterday, deleted it straight away as someone on the cwe Facebook page warned it was a virus.

User avatar
Essex Paul
Senior Forumgod
Senior Forumgod
Posts: 1048
Joined: Sun Sep 02, 2018 6:07 pm
CW-watches: 2

Re: Beware.....Phishing or virus?

Post by Essex Paul » Sat May 04, 2019 1:35 pm

Thanks for the heads up.
C1 Grand Malvern Power Reserve
C65 Trident Diver Blue

User avatar
Amor Vincit Omnia
Moderator
Moderator
Posts: 20065
Joined: Sat Jun 11, 2011 7:34 pm
CW-watches: 8
LE-six: Yes
Location: Norfolk, UK

Re: Beware.....Phishing or virus?

Post by Amor Vincit Omnia » Sat May 04, 2019 3:43 pm

:problem: “Christopher uses box...”
Steve
The half minute which we daily devote to the winding-up of our watches is an exertion of labour almost insensible; yet, by the aid of a few wheels, its effect is spread over the whole twenty-four hours.
Charles Babbage


@Avo238

User avatar
magicman
Senior Forumgod
Senior Forumgod
Posts: 2036
Joined: Thu Jan 29, 2009 4:45 pm
CW-watches: 3
Location: Loughton, Essex

Re: Beware.....Phishing or virus?

Post by magicman » Sat May 04, 2019 5:07 pm

Yes, got this too, and now deleted.

Thanks Steve

goodjack
Junior
Junior
Posts: 40
Joined: Thu Jan 01, 2015 10:38 pm
CW-watches: 6
Location: New York, NY

Post by goodjack » Sat May 04, 2019 6:51 pm

Also a big thanks!

AbstractAndy
Posts: 1
Joined: Mon Nov 19, 2012 7:56 pm

Re: Beware.....Phishing or virus?

Post by AbstractAndy » Tue May 07, 2019 11:03 am

Yep, another member with the phishing email....
I guess the worrying thing is that there must have been a data breach for the, ....can’t think of the technical term... oh yes “ jerk” to have got our email addresses. I wonder what other information they have had access to...payment card details, home address...?
Do please keep us updated CW.

User avatar
Kip
The Administrator
The Administrator
Posts: 29744
Joined: Tue Mar 13, 2007 8:45 pm
CW-watches: 146
LE-one: yes
LE-two: yes
LE-three: yes
LE-foura: yes
LE-fourb: yes
LE-five: yes
LE-six: yes
LESeven: yes
Location: New Hampshire, USA

Re: Beware.....Phishing or virus?

Post by Kip » Wed May 08, 2019 11:05 am

Our IT people have determined that this was definitely a phishing-email. As a result several emails were sent out via Alex's mailbox.

I have been assured that all has been done to mitigate against any risk/exposure both internally and externally.

There has been no security breach to any sensitive information whatsoever.

All you need do is to delete the email.
Kip

"Asylum Administrator"

Image

User avatar
MiniMpi
Senior Forumgod
Senior Forumgod
Posts: 33491
Joined: Sun Apr 10, 2011 9:56 am
CW-watches: 19
Location: Cork, Ireland

Re: Beware.....Phishing or virus?

Post by MiniMpi » Wed May 08, 2019 11:16 am

Thanks for the update Kip :thumbup:
C9 AM GT LE #001/135, C60 Ombré #001/300, C1-GM-5DA, C7 Proto, C11 Elite, C7 Bluebird, C70 Ascari, C7 COSC LE, C65 MK1 LE, C60 316L, C9-JH-MK3, C600-IPB, C8-KVKT-MK2, C60 GMT, C60 SKRS, C60-TI-V2, C8 UTC, C8 Flyer MK2, C65 Trident Diver, Rolex 912 Tank.

Post Reply