Paphos People

I received this email today from CYTA.

Has anyone else received this email?

Dear cytanet.com.cy Subscriber,

We are currently carrying-out a mentainace process to
your cytanet.com.cy account. To complete this process you
must reply to this email immediately, and enter your password
here (*********) if you are the rightful owner of this account.

This process we help us to fight against spam mails.
Failure to summit your password, will render your email address
in-active from our database.

You can also confirm your email address by logging into your
account at: http://webmail.cytanet.com.cy/

NOTE: You will be send a password reset messenge in next seven (7)
working days after undergoing this process for security reasons.

Thank you for using cytanet.com.cy!

THE CYTANET.COM.CY SUPPORT TEAM

No, not received this. I am always very suspicious when asked to "verify your password". If I do get it, I will let you know.

_________________
Jean

Retirement - harder work than working - But much more fun

Looks a bit dodgy to me JGG - spelling mistakes are usually a warning sign. Maybe call them first to check?

I too have not had this e-mail (though it may not have got past my spam filters). https://webmail.cytanet.com.cy/ does appear to be Cyta's secure webmail server, so you could enter that in your browser and log in. The idea of sending an e-mail request for your password is a tad foolish.

The e-mail access (all accounts) was down this morning, but logging out and back into iChoice then relogging into Netrunner fixed it.

In a similar vein hardly a day goes by without I get a request from 'HSBC' to supply my security details to some dubious web page. The message seems to have no difficulty getting past anti-spam measures at which gmail is usually quite proficient.

Return-Path: <[email protected]>
X-Original-To: my email address
Delivered-To: my email address
Received: from promitheas4.cytanet.com.cy (promitheas4.cytanet.com.cy [195.14.130.165])
by platons.cytanet.com.cy (Postfix) with ESMTP id E6AC429D8E3;
Wed, 9 Apr 2008 13:34:46 +0300 (EEST)
X-Virus-Scanned: By virus scanner at Cytanet
X-Spam-Flag: NO
X-Spam-Score: -0.302
X-Spam-Level:
X-Spam-Status: No, score=-0.302 tagged_above=-10 required=5
tests=[BAYES_00=-2.599, FORGED_YAHOO_RCVD=2.297]
Received: from titanium.dowco.com (titanium.dowco.com [69.67.187.114])
by promitheas4.cytanet.com.cy (Postfix) with ESMTP id 19623187DBD;
Wed, 9 Apr 2008 13:34:34 +0300 (EEST)
Received: from titanium.dowco.com (localhost [127.0.0.1])
by titanium.dowco.com (8.12.9/8.12.9) with ESMTP id m399720s009451;
Wed, 9 Apr 2008 02:07:02 -0700 (PDT)
(envelope-from [email protected])
Received: (from www@localhost)
by titanium.dowco.com (8.12.9/8.12.9/Submit) id m39972cw009450;
Wed, 9 Apr 2008 02:07:02 -0700 (PDT)
(envelope-from [email protected])
Received: from 78.138.5.46 ( [78.138.5.46])
as user [email protected] by webmail.dowco.net with HTTP;
Wed, 9 Apr 2008 02:07:01 -0700
Message-ID: <[email protected]>
Date: Wed, 9 Apr 2008 02:07:01 -0700
From: "THE CYTANET.COM.CY SUPPORT TEAM" <[email protected]>
Subject: Confirm Your E-mail Address
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 3.1
X-Originating-IP: 78.138.5.46
To: undisclosed-recipients:;

Above is what I see when I click on File/Properties/Details

Should there be anything to worry about here?

Well i think its not from cyta's mail server so is shiftyt. Ot originates from 78.138.5.46 which is in Holland wheereas you'd assume Cyta will send from Cyprus and from their own mail server.



Maybe inclusion of the correct webmail is just a red herring to give authenticity.

_________________
~~~~~~~~~~~~~~~~~~~~~~~~~~~
My opinion; worth price charged.

I wouldn't have though Cytanet would be using a Yahoo return path - like I said, I would report this to them.

This email now reported to CYTA

Will await further replies.

JGG

JGG - I had one but just deleted it.

_________________


"Your dog is your friend, your partner, your defender. You are his life, his love, his leader. He will be yours, faithful and true until the last beat of his heart. You owe it to him to be worthy of such devotion"

its so easy to spoof anything email wise and you don't have to be all that clever.
you simply need some form of mail server to send large amounts of mail out.
then a spoof webserver to fit the task.

xammp fits the bill, its got a webserver, mail server and everything else you would need to do this and it is free it also runs on windows so you can do it from home.
set your host name as cyta.com.cy and mx record as something cyta ish and you'll be away, have a return path to something genuine but free and untraceable, then go via a proxy and you are all but invisible.


simply rule of thumb is don't trust anything ever!

Cytanet subscribers warned of fraudulent email

CYTANET Internet subscribers are the latest victims of phishing, a method of tricking people into handing over personal data for bank and other accounts.

At the weekend, subscribers began receiving an email allegedly from the Cytanet support team.

It said CyTA were “currently carrying-out a mentainace (sic) process to accounts” and told subscribers that to complete the process they must reply immediately by entering their user name and password for their Cytanet account.

The reason the tricksters give is “fighting spam”, and they warn that anyone who does not comply will be wiped from Cytanet’s database

The message said subscribers would be sent a password reset message in the next seven days after undergoing the process.

One subscriber said she was alerted by the fact that the return email was an Internet-based address – [email protected] – and not a CyTA email.

The other thing to look out for is that the email was sent only in English. Cytanet alerts are usually sent out in Greek first, with English underneath.

CyTA spokeswoman Sofia Yiannakou said yesterday they had received several calls from subscribers about the suspicious email and were looking into the source.

CYPRUS MAIL
Tuesday, May 13, 2008

Email from CYTA today.........

PRESS RELEASE


INFORMATION AND ADVICE FROM CYTA

Beware of fraudulent e-mails!


CYTA has discovered that CYTANET customers have been receiving fraudulent e-mail messages.

These messages, which are made appear as they have been signed by the “CYTANET Support Team”, ask recipients to reveal their e-mail username and password, as part of an alleged “maintenance procedure regarding their CYTANET connection/account”.

The messages are yet another case of the well-known ‘phishing’ scam, which attempts to obtain details of Internet users’ identity, their credit cards numbers, passwords, account details, as well as other personal information by fraudulent means. Phishing e-mails usually reach recipients as spam in their
e-mail inbox or through pop-up windows when users visit certain websites.
All such messages, whether received by e-mail or during web surfing should be ignored.

This type of fraud has become a global problem which is under constant examination by specialist international organizations as well as Interpol. CYTANET has already begun investigating the problem with the assistance of its associates abroad.

CYTA wishes to state that it has nothing whatsoever to do with the sender of these messages and urges its customers to ignore them and, above all, never to reveal their personal information. It is recommended that customers who have already replied to such an e-mail message, and have revealed their passwords, to change them immediately.

We would also like to stress that under no circumstances does CYTANET ask for such information to be sent via e-mail and advises its customers to contact the CYTANET Call Centre on 8000 8080 whenever they have doubts or reservations about any incoming e-mails.

....................................................................................................

Well, that took time.

Cyprus Mail ran story on 13th May.