[LINK] Re: Account Update

[stephen at melbpc.org.au]

Hello Netscape business, helpdesk, and the Link Institute 

Thanks Netspace for clarifying the  net-access  phish-email  situation.  

Seems to me a scan of your account holder's 'From' line in their emails
for the so-powerful phish-inducing From-header 'support at netspace.net.au'
(as the phish i received was so headed) would catch the *@netspace phish

but, i'd guess you don't do that .. otherwise .. you wouldn't in any way
encourage generic phishing-email by employing obvious Netspace addresses
such as .. well, business, education and helpdesk etc, @ netspace.net.au?

Cheers all ISPs
Stephen Loosley

> From:   helpdesk at netspace.net.au
> To:   stephen at melbpc.org.au
> Date:   Fri, 18 Apr 2008 14:37:24 +1000 (EST)
> Subject:   [netspace.net.au #2631786] Re: Account Update  
 
Hello Stephen ,

Thank you for your e-mail,

Phishing e-mails will unfortunately continue to be an issue to all ISP's
and online services where customers can be coaxed into reveling
sensitive information. 

Unfortunately Netpsace is unable to stop phishing type e-mails
originating from other networks, however Netspace does have methods to
try and stop these e-mails being distributed to customers by
implementing Spam Cop and CBL anti spam black lists on the mail servers.
Further to the black lists Netspace also implements Grey listing. 

Further to the above Netspace customers are also able to enable further
block lists to there mail accounts via their account toolbox at
https://my.netspace.net.au . Further to the additional block lists
customers are also able to enable a spam filter which will will search
for certain works and sentences commonly found in spam e-mails and
generate a spam score, based on the filter settings set by the customer
the e-mail will either continue to the mailbox or be rejected.

In the case that we are aware of a large amount of customers have
received such an e-mail a newsdesk item will be posted at the newsdesk
https://my.netspace.net.au/myNetspace/newsdesk.do to alert customers of
this.

Further information regarding Netspace and spam may be found at the link
below: http://www.netspace.net.au/spam/

Netspace also recommends if the E-mail is accidentally opened and/or
actioned, users are advised to immediately run a full virus/spyware scan
on their system and change their Netspace account password by visiting
MyNetspace or contacting the Netspace Technical Support team on 131 456.


If you have any further queries please contact us.

Regards,

James
Netspace Technical Support
Netspace Online Systems
--

> From: business at netspace.net.au
> To: stephen at melbpc.org.au 
> Date: Fri, 18 Apr 2008 09:08:29 +1000 (EST) 
> Subject: [netspace.net.au #2631785] Re: Account Update

Dear Steven,

Thanks for your e-mail.

Netspace has recently identified a hoax e-mail that has been circulated
via e-mail.

A News-desk warning regarding this hoax has been posted on the
MyNetspace News-desk: https://my.netspace.net.au/myNetspace/newsdesk.do

Regards

Netspace Online Systems

> [stephen at melbpc.org.au - Thu Apr 17 20:10:57 2008]:
> 
> Dear Netspace, and Link Institute mailing list,
> 
> The following email's reply mailto address is: acct.helpdesk at y7mail.com
> 
> Am wondering, Netspace, (being a major Australian ISP) if you'd
> advise myself (and Link) if this phish is common, and some of the
> protections from such you have in place for account holders, and for
> the Internet?
> 
> Cheers Netspace
> Stephen Loosley
> Victoria, Australia
> --
> 
>  From:   Netspace Support Team <support at netspace.net.au> 
>  To:   stephen at melbpc.org.au 
>  Date:   Wed, 16 Apr 2008 01:14:57 +1000 
>  Subject:   Account Update 
>  
>   Dear User,
> 
>   We wrote to you on 29th March 2008 advising that you change the
>   password on your account in order to prevent any unauthorised
>   account access following the network intrusion we previously
>   communicated.
> 
>   we have found the vulnerability that caused this issue, and have
>   instigated a system wide security audit to improve and enhance our
>   current security, in order to continue using our services you are
>   require
>   to update you account details below.
> 
>   To complete your account verification, you must reply to this email
>   immediately and enter your account details below.
> 
>   Username: (**************)
>   
>   password: (**************)
> 
>   Failure to do this will immediately render your account
>   deactivated from our database.
> 
>   We apologise for the inconvenience that this will cause you during
>   this period, but trust you understand that our primary concern is 
>   for our customers and for the security of their data.
>   our customers are totally secure
> 
>   Netspace Support Team
> 
> 


Message sent using MelbPC WebMail Server