Strange email from the forum

[Mathew Vernon - Membership Secretary]

My spam filter has picked up a couple of these.  Any cause for concern?

 

Appears to have come from WSCC, so not sure if someone trying to access my account?

 

Thanks

Mat

[Ian Kinder (Bagpuss) - Joint Peak District AO]

when you float your mouse over the 'verify your identity' link, what address is displayed?

[Tim (Sideways) Johnson - Club Treasurer]

Mat, I had the same to my personal email from treasurer@wscc.co.uk too.

 

Deleted it from my spam catcher anyway.

[Mathew Vernon - Membership Secretary]

20 hours ago, Ian Kinder (Bagpuss) - Joint Peak District AO said:

when you float your mouse over the 'verify your identity' link, what address is displayed?

Hi Ian,

Sender appears to be website@wscc.co.uk

 

The Verify Identity and Change Password links both point to: https://zapiregupe.z21.web.core.windows.net/

 

Usually would just delete these without a second thought, but they're either actually coming from our domain somehow, or someone has done a really good job of spoofing.

 

If useful for troubleshooting/identification, here are the details my gmail account is showing for the email:

 

 

[Quinten]

Comes from Brazil...

[Mathew Vernon - Membership Secretary]

6 minutes ago, Quinten said:

Comes from Brazil...

Interesting.  Looks like it has some connection to GGR though - aren't they the company that provides the forum email capability?

(Not suggesting they've done anything wrong here)

[Captain Colonial]

Calling @WSCC Webmaster to the thread, please...

[WSCC Webmaster]

Well, as I may have mentioned before, email is not my area of expertise.

 

However...

 

The connection via ggr is expected, because the server is on their network and Postfix is the software on the server that routes/redirects our emails.

 

But, it certainly looks like someone is “spoofing" one of our publicly visible email addresses and is using it to try and get access to a user account with a very typical “phishing" type of email. Hence why this ended up in your spam.

 

Good to know your spam filter is working - so just ignore them as these type of emails are used as a scattergun approach to hacking accounts.

 

It goes without saying that you NEVER EVER click on ANY link in an email unless you are absolutely 100% sure that it is genuine.

[Quinten]

 

Further proof