AT&T Internet Expert
Penny_1
Posts: 1,196
Registered: ‎08-17-2009
Re: Email Phishing Alert!
Hello frenchstan,
 
 
We have recently become aware of this email. It was not generated by AT&T, and we believe it is a scam. Please help us track the person responsible for this email by forwarding the message with the Internet Headers to: scam@abuse-att.net
 
 A Phishing email is an email that appears to come from AT&T. The goal is to have the Customer respond to the email and provide personal information. Usually the email will state that AT&T needs to update the Customers records, or that their account was suspended and include steps to restore service (by providing some of their personal information).
 
We advise do not to respond to these emails but to forward them to scam@abuse-att.net. and AT&T will perform an investigation of the email and work to prevent it from happening again in the future.
 
 AT&T will not send any form of email communication soliciting personal information from the Customer.
 

How to Protect Against Phishing:

  1. Log Directly Into the Service. If you receive a link from a financial institution, a service provider such as AT&T, or a processor like PayPal, type the website directly into your address bar.

    Note: For example for AT&T you would use http://www.att.com/ instead of clicking on the link in the e-mail. However this is not absolute protection because some phishers and spyware writers are modifying the HOSTS file on your PC. The best precaution is to call the company on the telephone to verify the e-mail.

  2. Beware of Generic Greetings. E-mails from a bank or online retailer should be able to address you by your first and last name since you are an account holder. Phishing e-mails frequently use "Dear User" or "Dear Member".
  3. Don’t Open Email Attachments. No reputable company will ever send an e-mail asking you to download an attachment or a software program (unless you specifically request it). The attachments contained in phishing e-mails usually contain viruses that may harm your computer or attempt to compromise your account through spyware.
  4. Note: Be aware that many spyware programs can be installed via e-mail and once on your system the spyware will make it completely open to attackers who are able to intercept not only your surfing history, but keystrokes.

  5. Be Skeptical of Personal Information Requests. While it is possible for your banking institution to ask for this information it is never advisable to send it via e-mail or to answer such a request via e-mail. A sure-fire tip that criminals are phishing is the request for details such as your full name, account password, credit card number, bank account, PIN number, Social Security Number, or even your mother's maiden name. These are major red flags that the e-mail is not genuine and is only designed to extract information from the target.
  6. Avoid E-mail Forms. Some phishing attacks will come in the form of Rich HTML that usually has a form where you can input the information directly into the e-mail. Never do this. Always surf directly to the site by manually entering in the web address.
  7. Keep Tabs on Your Accounts. It is also wise to regularly check your bank, credit and debit card statements to ensure that all transactions are legitimate. The longer you go without checking, the more damage a thief can do. You may also want to look at credit and bank monitoring services that will watch this activity for you. If anything is suspicious, contact your bank and all card issuers immediately to double check the transactions.

Remember to always mark items that you find useful as "Accepted Solutions”, you can even mark multiple
posts
in a single thread.  This will help other users find this information too!!