The latest SCAM variant

[Gliwmaeden2]

As though from Talktalk  / Everymail. Do not open any attachments. 

Do not click on links.

 

 

[Gliwmaeden2]

A more recent variant:

 Unfortunately Talktalk's screening didn't send this to SPAM so don't be surprised if it turns up in your inbox.

The underlying "sender name" is probably fake or harvested.

 

The sad (and worrying) thing is that someone somewhere has got hold of a Talktalk customer list to send these emails out to.

My Talktalk email address shows no results in https://haveibeenpwned.com/

.....but somehow these phishing scams keep coming. 

[MoiraMerry]

Thank you very much for your help 🙂

[Gliwmaeden2]

Run antivirus and malwarebytes checks on all your devices, @MoiraMerry.

Keep an eye on "sent" messages as that's usually the give away that the address book has been harvested, and if you need further help securing your emails, contact Talktalk directly. 

03451 720088 after 9am; or Live Chat after 8am.

[MoiraMerry]

Stupidly we clicked on it …and some people have had emails asking to catch up. We’ve changed password should we do anything else?

feel stupid!

[Gliwmaeden2]

This one actually did go to Spam, so Talktalk's filters seem to be improving:

 

Notice that the signature after 'Thanks' is not correct, and checking the sender name reveals the above.

Furthermore:

Superficially, from "The Everymail Team" might fool a few people. The recipient collective list may also lure some into clicking on links.

"Hello User" is another red flag - and it turned up several days after the deadline and sent dates. I have been looking out for these, & it wasn't showing till today.

Anyway, just a heads up to keep alert!

[Gliwmaeden2]

😄

Yes, very bad.

Strange how it never goes to Spam though! And something of this ilk seems to come in about once a month.

[fr8ys]

That is so poor English, whatever does it mean?

One of the worst spam emails I've seen  for grammar.