Phishing Spam from 'Vodafone'?

I've just received an email, purportedly from Vodafone offering £20 free
credit if I sign up to e-Top-Up.

I don't have a Vodafone phone and the site where you fill in the form is
NOT secure.

I smell a rat...

--
Helen D. Vecht: helenvecht@zetnet.co.uk
Edgware.

Helen Deborah Vecht wrote:
> I've just received an email, purportedly from Vodafone offering £20 free
> credit if I sign up to e-Top-Up.
>
> I don't have a Vodafone phone and the site where you fill in the form is
> NOT secure.
>
> I smell a rat...
>
You're right it is a rat. A big fat smelly one.

I emailed their customer.care team and their webmaster last
time and they put me a tenner of free credit on for letting
them know

--
xCx
*Disclaimer* My opinions are mine and I do not represent
anyone or any company.

xCx <xcx@bigfoot.com>typed


> Helen Deborah Vecht wrote:
> > I've just received an email, purportedly from Vodafone offering £20 free
> > credit if I sign up to e-Top-Up.
> >
> > I don't have a Vodafone phone and the site where you fill in the form is
> > NOT secure.
> >
> > I smell a rat...
> >
> You're right it is a rat. A big fat smelly one.

> I emailed their customer.care team and their webmaster last
> time and they put me a tenner of free credit on for letting
> them know

I spoke to someone at Vodafone, informed them twice by email, forwarded
the email to reports@banksafeonline.org.uk and also to my 15-year-old
nephew, to educate him about phishing. (His phone's on O2, mine's on
Orange so neither of us will have been defrauded.)

--
Helen D. Vecht: helenvecht@zetnet.co.uk
Edgware.

helenvecht@zetnet.co.uk declared for all the world to hear...
> I've just received an email, purportedly from Vodafone offering £20 free
> credit if I sign up to e-Top-Up.
>
> I don't have a Vodafone phone and the site where you fill in the form is
> NOT secure.
>
> I smell a rat...

URL??
--
Regards
Jon

Jon <spam@jonparker.plus.com>typed


> helenvecht@zetnet.co.uk declared for all the world to hear...
> > I've just received an email, purportedly from Vodafone offering £20 free
> > credit if I sign up to e-Top-Up.
> >
> > I don't have a Vodafone phone and the site where you fill in the form is
> > NOT secure.
> >
> > I smell a rat...

> URL??

My newsreader doesn't do html so I saved the page to disc.

I think this is it.

"http://online.vodafone.co.uk.dispatch.portal.appmanager.v odafone.loginservice.page.myvodafone.servicereques ted.koryo.biz.ly/index.php?_nfpb=true&_pageLabel=template12&pageID= MV_1027&wt_oss=topup"

Following the links is interesting.

Firefox now tells me they are a suspected forgery.

--
Helen D. Vecht: helenvecht@zetnet.co.uk
Edgware.

Jon <spam@jonparker.plus.com>typed


> helenvecht@zetnet.co.uk declared for all the world to hear...
> > I've just received an email, purportedly from Vodafone offering £20 free
> > credit if I sign up to e-Top-Up.
> >
> > I don't have a Vodafone phone and the site where you fill in the form is
> > NOT secure.
> >
> > I smell a rat...

> URL??


clicking on the link gets you to a page that links to this:

http://online.vodafone.co.uk.dispatc...7&wt_oss=topup

--
Helen D. Vecht: helenvecht@zetnet.co.uk
Edgware.

"Helen Deborah Vecht" <helenvecht@zetnet.co.uk> wrote in message
news:313030303736393546CF49EA45@zetnet.co.uk...
> Jon <spam@jonparker.plus.com>typed
>
>
>> helenvecht@zetnet.co.uk declared for all the world to hear...
>> > I've just received an email, purportedly from Vodafone offering £20
>> > free
>> > credit if I sign up to e-Top-Up.
>> >
>> > I don't have a Vodafone phone and the site where you fill in the form
>> > is
>> > NOT secure.
>> >
>> > I smell a rat...
>
>> URL??
>
> My newsreader doesn't do html so I saved the page to disc.
>
> I think this is it.
>
> "http://online.vodafone.co.uk.dispatch.portal.appmanager.v odafone.loginservice.page.myvodafone.servicereques ted.koryo.biz.ly/index.php?_nfpb=true&_pageLabel=template12&pageID= MV_1027&wt_oss=topup"
>
> Following the links is interesting.
>
The .ly TLD is Libya, we can only guess what this cc fraud scam might be
funding.
--
Graham
%Profound_observation%

helenvecht@zetnet.co.uk declared for all the world to hear...
> Jon <spam@jonparker.plus.com>typed
>
>
> > helenvecht@zetnet.co.uk declared for all the world to hear...
> > > I've just received an email, purportedly from Vodafone offering £20 free
> > > credit if I sign up to e-Top-Up.
> > >
> > > I don't have a Vodafone phone and the site where you fill in the form is
> > > NOT secure.
> > >
> > > I smell a rat...
>
> > URL??
>
> My newsreader doesn't do html so I saved the page to disc.
>
> I think this is it.
>
> "http://online.vodafone.co.uk.dispatch.portal.appmanager.v odafone.loginservice.page.myvodafone.servicereques ted.koryo.biz.ly/index.php?_nfpb=true&_pageLabel=template12&pageID= MV_1027&wt_oss=topup"
>
> Following the links is interesting.
>
> Firefox now tells me they are a suspected forgery.

The URL itself is a bit of a give away with the tld of koryo.biz.ly

>
>

--
Regards
Jon

Jon <spam@jonparker.plus.com>typed


> The URL itself is a bit of a give away with the tld of koryo.biz.ly

Indeed.

My 15-year-old nephew had not heard of 'phishing' until yesterday; I am
educating him, with this as an example. With any luck, he can then tell
his mates.

--
Helen D. Vecht: helenvecht@zetnet.co.uk
Edgware.

Jon <spam@jonparker.plus.com>typed


> The URL itself is a bit of a give away with the tld of koryo.biz.ly

Indeed.

My 15-year-old nephew had not heard of 'phishing' until yesterday; I am
educating him, with this as an example. With any luck, he can then tell
his mates.

--
Helen D. Vecht: helenvecht@zetnet.co.uk
Edgware.

uja
U¿ytkownik "Jon" <spam@jonparker.plus.com> napisa³ w wiadomo¶ci
news:MPG.21394745938221ad98ac04@text.usenet.plus.n et...
> helenvecht@zetnet.co.uk declared for all the world to hear...
>> I've just received an email, purportedly from Vodafone offering £20 free
>> credit if I sign up to e-Top-Up.
>>
>> I don't have a Vodafone phone and the site where you fill in the form is
>> NOT secure.
>>
>> I smell a rat...
>
> URL??
> --
> Regards
> Jon

Hi,

As a staff member at Vodafone I've been forwarding phishing attempts
back internally to the relevant online teams to raise awareness
surrounding them (see my below post on the vnunet forum earlier this
month for a way of how to report them to us). Hopefully by raising
understanding on forums such as this one it'll stop anybody getting
caught out in future (the below is a slightly different URL to the one
mentioned in the original post)

http://forums.vnunet.com/thread.jspa...17935&tstart=0

------------------

(my post on vbunet.com)

Re: Vodaphone scam
Posted: 13-Aug-2007 18:33 in response to: eliz6beth Reply

Hi,

Just come across this thread on Google. Working for Vodafone (and
indeed as everyone has worked out) it is a scam, I've had a similar
email before now (strange as a staff member!) At work I do
occasionally speak with the department who deal with these type of
situations and they've confirmed they were aware of it (the page -
before it was taken down - was also using an earlier version of the
Vodafone logo)

For the record, if anybody else comes across anything like this in
future we do have a team who monitor the internet and also internet
messageboards and public forums - if you wanted to report a scam
attempt you can go to www.vodafone.co.uk, 'contact us' (bottom of the
screen) then email. Here you can forward on the relevant page / copy
of the email. Also, by leaving the text FIT135 in the body of the
email, this makes sure it goes through to a team who can immediately
raise it with the relevant department.

If in doubt, always relocate the page itself from the company home
page (www.vodafone.co.uk for UK users, while www.vodafone.com will
link to any global Vodafone site).

Additionally, you can access the UK pay as you talk / top up sections
by going to the co.uk page > priceplans > pay as you talk > My
Vodafone.

Finally, some third party websites also encourage feedback and
archiving on the internet to alert others

http://www.millersmiles.co.uk/search/Vodafone