Password reset request
-
Yesterday, Mrs. George got this email.
Guess what? She doesn't have an AT&T account.
The phone number is legit.
The email came from update@emaildl.att-mail.com.
Of course, it was ignored.
Here's the url for the "Sign-in myAT&T account" (notice the lack of a space between "my" and "AT&T"
-
Don’t click the link. Reach out to the system administrator directly on the website and see if their email was legit.
If it was, she should switch to your computer and go to all important sites and change her password. Take her device to a computer store/repair and have it cleaned.
-
Don’t click the link. Reach out to the system administrator directly on the website and see if their email was legit.
If it was, she should switch to your computer and go to all important sites and change her password. Take her device to a computer store/repair and have it cleaned.
@LuFins-Dad said in Password reset request:
Don’t click the link.
Of course not.
Reach out to the system administrator directly on the website and see if their email was legit.
Of course. Chatting with AT&T right now.
If it was, she should switch to your computer and go to all important sites and change her password. Take her device to a computer store/repair and have it cleaned.
The emails were received on my iPad (I can check her mails - because she doesn't, LOL) as well as my computer.
-
@LuFins-Dad said in Password reset request:
Don’t click the link.
Of course not.
Reach out to the system administrator directly on the website and see if their email was legit.
Of course. Chatting with AT&T right now.
If it was, she should switch to your computer and go to all important sites and change her password. Take her device to a computer store/repair and have it cleaned.
The emails were received on my iPad (I can check her mails - because she doesn't, LOL) as well as my computer.
@George-K said in Password reset request:
@LuFins-Dad said in Password reset request:
Don’t click the link.
Of course not.
Reach out to the system administrator directly on the website and see if their email was legit.
Of course. Chatting with AT&T right now.
If it was, she should switch to your computer and go to all important sites and change her password. Take her device to a computer store/repair and have it cleaned.
The emails were received on my iPad (I can check her mails - because she doesn't, LOL) as well as my computer.
It doesn’t matter what device you received the emails on. They were sent from somewhere… What I would be concerned with is if there is a Trojan in one of your devices recording any password she tries to create.
It could simply be a bot that triggered the password reset while trying to access, but I would be careful.
-
The email could be legit.
If somebody enters the email address or user name of your wife and clicks on "Forgot password", she'd likely get a mail like that.
"Clicking on the link" usually doesn't do anything bad, even if it is a malicious email. They'd present a form to enter the information they are actually after. It's a good idea to verify the https certificate.
The safest option is to type the URL of the service from which the email supposedly is into your browser and see if you can still log in and/or find any information there. Don't be fooled by similarly looking URLs (which, thanks to Unicode, can be made very similar).
-
The email could be legit.
If somebody enters the email address or user name of your wife and clicks on "Forgot password", she'd likely get a mail like that.
"Clicking on the link" usually doesn't do anything bad, even if it is a malicious email. They'd present a form to enter the information they are actually after. It's a good idea to verify the https certificate.
The safest option is to type the URL of the service from which the email supposedly is into your browser and see if you can still log in and/or find any information there. Don't be fooled by similarly looking URLs (which, thanks to Unicode, can be made very similar).
@Klaus that's what I'm thinking. She probably went to some site which pulled her email address and off-we-go.
I chatted with AT&T and they said ignore the email, particularly since she doesn't have an AT&T account.
The other site doesn't really have an easy-to-find contact link. I'll ignore that one.
-
Not much more you can do after reporting the incident to AT&T.
A family member received emails from (what looks like) Washington DC’s welfare department about getting government welfare from the District — this despite said relative has never applied for any government welfare and has never been a DC resident. I helped said relative reported it to an publicly listed email address published on an official DC welfare website, and that’s it. No idea if anyone in that welfare department does anything about it.
Also seen emails claiming to be from a bank that underwrites an Amazon.com credit card — despite not having applied for any Amazon.com credit card. That’s also being reported as “spam” then basically ignored.
