Away with you scammer! Woudl someone do the needful please?

[Sysman]

Just found on usenet. Posted here so you can be aware of another scam.

From: recoverhelp.co.uk@gmail.com
Subject: bt com change password
Date: Thu, 25 Sep 2014 23:29:09 -0700 (PDT)
NNTP-Posting-Host: 106.219.140.224
User-Agent: G2/1.0
MIME-Version: 1.0
Injection-Date: Fri, 26 Sep 2014 06:29:10 +0000
Content-Type: text/plain; charset=ISO-8859-1


Hey
Are you suffering from any problems related to bt. Password help offer BT Com support services like password recovery, e mail support,
  update new number, file attachment, mail account set up and so on for the users of BT Com Mail service etc.
Help Line No. 0800-078-6044. try and get results..............

Get Details at Password Help | bt password help |Email Services | bt contact number

whois passwordhelp.co.uk

    Domain name:
        passwordhelp.co.uk

    Registrant:
        Anomla Technologies Limited

    Registrant type:
        UK Limited Company, (Company number: 8826678)

    Registrant's address:
        1st Floor, 2 Woodberry Grove,
        Finchley, London,
        London
        London
        N12 0DR
        United Kingdom

    Data validation:
        Registrant contact details validated by Nominet on 04-Sep-2014

    Registrar:
        BigRock Solutions Ltd. [Tag = BIGROCK]
        URL: http://www.bigrock.in

Anyone care to do the needful?

[DaveB]

Anomla Technologies Ltd.
1ST FLOOR
2 WOODBERRY GROVE
FINCHLEY
LONDON
N12 0DR
Incorporation date 27/12/2013

No Accounts Filed.

3 Directors, all of whom have no other directorships.
Ankit Gulati
Lakhan Yadav
Mr Om Prakash Vishwakarma

All of whom have given registered addresses in India, all in their 20's.

The trading address is shared with WBU International Ltd, also established just over a year ago with no accounts filed. 2 directors.

Alex Burkill
Baljit Singh

No other directorships. None in Common with Anomla Technologies. However they have both given their registered address as that of the company,
1ST FLOOR
2 WOODBERRY GROVE
FINCHLEY
LONDON
N12 0DR

Now, looking at the Google+ page for WBU we find a review entry from Baljit Singh. That leads back to his Google+ page which contains lots of references to IT services provided by WBU and other assorted tech articles from other sources. https://plus.google.com/+BaljeetSing...ts?hl=en&gl=uk

A bit more digging on that addresses reveals the fact that there are quite of few companies working out off these premises, including A1 Company Services, a company formation services company that offers, among other things, a registered office and mail forwarding address.

What I suspect is that we have some enterprising young gentlemen who happen to work in, or have access to, a BT call centre and have decided they can make more money by reselling services themselves.

Oh, and they have an 0800 number, Thats going to cost them every time someone rings them...

[TheFaQQer]

Oh, and they have an 0800 number, Thats going to cost them every time someone rings them...

I was thinking the same thing

[xoggoth]

Sometimes it's hard to be totally sure if a thing is a scam. Had a thing yesterday, apparently from a real company relevant to our business with an attached xlsx file. Can't see how an xlsx file can contain a virus but checked it the safe way anyway (rename to zip and use Notepad on the xml files). Nowt relevant.

[cojak]

It may well be a scam - but a scam of whom?

I wonder if BT knows about this 'reseller'?

[cojak]

Sometimes it's hard to be totally sure if a thing is a scam. Had a thing yesterday, apparently from a real company relevant to our business with an attached xlsx file. Can't see how an xlsx file can contain a virus but checked it the safe way anyway (rename to zip and use Notepad on the xml files). Nowt relevant.

<tucks nugget away for future reference.>

[Bunk]

Sometimes it's hard to be totally sure if a thing is a scam. Had a thing yesterday, apparently from a real company relevant to our business with an attached xlsx file. Can't see how an xlsx file can contain a virus but checked it the safe way anyway (rename to zip and use Notepad on the xml files). Nowt relevant.

They definitely can contain a virus. Most places I've worked at have macros and scripting disabled by default to prevent any funny business.

[DaveB]

They definitely can contain a virus. Most places I've worked at have macros and scripting disabled by default to prevent any funny business.

WBS +1

It's not the spreadsheet you have to worry about it's the scripting and macros and other embedded nasties that do the bad stuff.

The RSA hack a few years back was executed via an excel spreadsheet containing a macro that executed an exploit in Adobe Flash to gain control of the local system and then leveraged that into wider access. The spreadsheet was sent via a targeted phishing attack against small numbers of employees of RSA with the specific intent of compromising systems with access to sensitive data.