Warning Phishing Attempt!

[danshows]

I just received a phishing attempt to an email address that is only given to Tivo and Tivocommunities. I've contacted the originating isp, spam @ uce,gov, phishing @ cc,yahoo-inc,com [the reply-to address is a yahoo account], Tivo and Tivocommunities about the email but I want everyone to be aware. Some how this jack a.. got a hold of email addresses from Tivo or this community. -Dan

******* HERES THE EMAIL **************
*** DO NOT RESPOND TO THIS EMAIL******
**SCAM SCAM SCAM SCAM SCAM SCAM *****
From: garrysmith @ actexoffsho,com
To: undisclosed-recipients@, @
Subject: PART-TIME JOB OFFER!!!


ACTEXO Research and Consultancy Ltd
678 WINDERMEAR WAY PRESTWICH MANCHESTER
EC4N 6JP
ENGLAND
EMAIL: garrysmith_111 @ yahoo,com


Good day
My name is Garry Smith, 35 years of age, 3 kids, a lovely girl and
2 troublesome kids, and the love of my life, my wife. I am a
somewhat multi talented man and I do quite alot of travelling and
get to meet quite alot of people who need my services.
I own a research/consultancy firm which offers knowledge on
developmental biology, embryology, paleontology and pretty much
anything from zoology to plant life, I reside in Dublin, Ireland and
even though I have lived most of my life in other parts of the world, I
am fully residing in Ireland even though I get to do alot of
travelling though.

Presently, I have just been granted a funding to head a research
project in UK regarding rare and vulnerable plant species and this
would be commencing very soon, However my fundings were by my american
counterparts which sent me the bunch of payments.

Getting an accountant in the states or opening an account would have been
my best choice but I have a deadline to meet and taking any of those
choices would cost me time and a whole lot of other requirements I am not
ready to deal with as I would be travelling alot in the meantime. So
presently, you would be able to deal with cash, I would be willing to
employ you on contract basis to be my payment representative back in the
states, thisway I could issue and make these Payment into your account,
you could then cash them easily, withdraw 10% of the total amount as your
commission and then send the rest back to me .

Bear it in mind that we would be dealing with quite a handful of cash and
you could be making up to $4000 just working with me in a short period of
time. I would be glad if you accept my proposal and I intend to
commence on starting as soon as you are ready. If you are interested,
please email me back on garrysmith_111 @ yahoo,com so as we could
conclude all arrangements.United State Of America are reguiered only.All
this are required for the sending of the payment
NAME.................................
ADDRESS...........................
CITY...................................
STATE................................
ZIPCODE.............................
PHONE NUMBER...................................
PRESENT OCCUPATION.............................
AGE.........................................................


Thank You
GARRY SMITH
ACTEXO Research and Consultancy Ltd
NOTE........ALL RESPONSE MUST BE SEND TO THIS EMAIL ADDRESS ONLY
garrysmith_111 @ yahoo,com

[ZeoTiVo]

Must have used the phishing template from Microsoft MisWord

[supasta]

Interesting that this is your first post....

[rainwater]

Originally Posted by danshows

Some how this jack a.. got a hold of email addresses from Tivo or this community.

Or just guessed your email address like a lot of scripts. Btw, couldn't you just delete it? Contacting the isp isn't going to help if its a spam bot.

[danshows]

Yes, very observant. It is my first post. I usually only browse. Most of my questions and comments have already been discussed.

My email address would be very difficult to guess. It's not @yahoo, @hotmail or any of the other popular free services. I can [and did delete it] but every little extra step helps. I don't care if the ISP deletes my comment w/o reading them. I did my part to stop it. Just getting it out helps b/c crap like this wouldn't happen if nobody fell for it. I had to give up my last email address 5 years ago b/c of an extreme amount of spam and have been very successful since then in preventing it.

Sorry I tried to help. I'll go back to just browsing. -Dan

[anom]

I don't know what phishing is, but thanks for the tip! I just sent this guy $4000 upon receipt of his personal third party check drawn on a bank in Nigeria. Looks like I just made an easy $400!

[jmace57]

Originally Posted by anom

I don't know what phishing is, but thanks for the tip! I just sent this guy $4000 upon receipt of his personal third party check drawn on a bank in Nigeria. Looks like I just made an easy $400!

Jim

[GoHokies!]

Originally Posted by danshows

Yes, very observant. It is my first post. I usually only browse. Most of my questions and comments have already been discussed.

I think that the point is that with now 2 posts, and a Jan 2007 reg date it looks a lot like you registered to make this comment. If you did, then when and how did you give your email address to Tivo Community for the spammer to steal in the first place?

Sounds kind of backwards to me too...

[drew2k]

Originally Posted by GoHokies!

I think that the point is that with now 2 posts, and a Jan 2007 reg date it looks a lot like you registered to make this comment. If you did, then when and how did you give your email address to Tivo Community for the spammer to steal in the first place?

Sounds kind of backwards to me too...

<contrarian mode>

I've seen people with join-dates from three years ago who only made their first post in the last 30 days (all were DirecTV subscribers having problems with Season Passes), so it's also in the realm of possiblity that danshows registered early in January but only posted today when he thought his email addressed was compromised because of TCF.

</contrarian mode>

[reh523]

Spam it can't be. If I deleted every email address because I got spam, well lets just say I would have a lot of them deleted.

If I told you I moved to a new address every time I got junk mail you would think I was nuts!!

Like my pastor says "Build a bridge" (get over it).

[cherry ghost]

Originally Posted by GoHokies!

I think that the point is that with now 2 posts, and a Jan 2007 reg date it looks a lot like you registered to make this comment. If you did, then when and how did you give your email address to Tivo Community for the spammer to steal in the first place?

Sounds kind of backwards to me too...

From his profile:

Join Date: 01-06-2007

[Deacon West]

I would only respond if it were from a Nigerian prince or ambassador. Then, you know it's for real.

Sorry anom, I guess I really smeeked.

[drew2k]

Originally Posted by cherry ghost

From his profile:

Join Date: 01-06-2007

Woohoo! Score one for the contrarian!

[GoHokies!]

Good on you - usually I like being the contrarian.

That's pretty unusual that someone that's been registered for 10 days gets an email and those of us that have been registered for significantly longer haven't.

[danshows]

I've watched the forums since 2004 when I started looking into buying my Tivo. I just check the first couple of pages of sticky-s and posts like a good little boy, but recently (1/6/2007) I needed to actually search for an answer about WPA and wireless adapters since I just got a new router. It just happens to be that you must register as a member in order to search the topics. So I registered and found my answer. Sunday night I received this spam.

So since we really want to dissect this situation: Tivo has had the unique email address that is solely for my tivo related emails for over a year w/o incident and I just gave TivoCommunities the same email address on the 6th of this month to regist and got a phishing attempt about a week later...

You guys offer great experience and advice but sure haven't made me feel welcome after I try to be helpful.

[cherry ghost]

Originally Posted by danshows

I've watched the forums since 2004 when I started looking into buying my Tivo. I just check the first couple of pages of sticky-s and posts like a good little boy, but recently (1/6/2007) I needed to actually search for an answer about WPA and wireless adapters since I just got a new router. It just happens to be that you must register as a member in order to search the topics. So I registered and found my answer. Sunday night I received this spam.

So since we really want to dissect this situation: Tivo has had the unique email address that is solely for my tivo related emails for over a year w/o incident and I just gave TivoCommunities the same email address on the 6th of this month to regist and got a phishing attempt about a week later...

You guys offer great experience and advice but sure haven't made me feel welcome after I try to be helpful.

I probably would have reached the same conclusion as you did considering the timing of the email. Welcome

[drew2k]

Originally Posted by GoHokies!

Good on you - usually I like being the contrarian.

Well, I NEVER win anything, so I have to celebrate whenever I can!

[astrohip]

Originally Posted by danshows

So since we really want to dissect this situation: Tivo has had the unique email address that is solely for my tivo related emails for over a year w/o incident and I just gave TivoCommunities the same email address on the 6th of this month to regist and got a phishing attempt about a week later...

You gotta admit the guy has a point. Never even USED the email addy, just registered with it. Boom! Spam! (And BTW, I don't think anyone goes to this much effort as a troll).

I use a similar process. I have different emails for friends, online purchases, public forum such as this, business, etc. I get very few spam emails at the one I use with family/friends. I got TONS at the ones I use on forums. Believe it or not, I don't get much at the one I use for online purchases, which tells me most places I buy from don't sell email addies (surprising!).

Anyone from TCF wanna comment? An official "we don't sell". Silence can be d*mning (just sayin'...)

[drew2k]

Originally Posted by astrohip

Anyone from TCF wanna comment? An official "we don't sell". Silence can be d*mning (just sayin'...)

If this thread was in the Forums Operation Center forum there might be more of an impetus for official response ...

[ZeoTiVo]

Originally Posted by astrohip

Anyone from TCF wanna comment? An official "we don't sell". Silence can be d*mning (just sayin'...)

if they sold addresses then it would have been noticed long before now. I think we can treat danshows situation as unique and possibly caused by some other factor that has not been discerned yet.

[gonzotek]

Privacy Statement(linked from most forum areas). Scroll down about 85% of the page to find the text quoted below.

Privacy Notice

TiVo Community Forum values your privacy. To keep you informed, we have created this privacy statement that discloses our purposes and methods for online collection and use of information. This statement applies to all information collected through the TiVo Community Forum websites and information gathered from any web pages that we host.

Site Operator and Contact for Privacy Inquiries:

TiVo Community Forum
6 Quail Run
Hiltion, NY 14468


Privacy Contact: TiVo Community Forum Privacy Administrator
privacy @ TiVoCommunity.com

Types of Information Collected

Generally, personal information is not collected from visitors to the TiVo Community Forum websites. However, in order to access certain special services, personal information is requested; those cases are described in more detail below.

Forum Registration

TiVo Community Forum requires a valid e-mail address for users who want to participate in the TiVo Community Forum. This allows us to protect our community from abusive postings and provides a verifiable point of contact should legal questions arise. At any time, you have the ability to keep your e-mail address hidden from other users by selecting that option within your user profile.

Also in the Forum registration, you have the option of providing some additional information such as occupation, interests, and homepage URL. This information is made available to other bulletin board users to foster a sense of community. If you have any concerns about providing this information, simply leave the fields blank and your registration will still be processed.


Cookies

Certain activities on the TiVo Community Forum websites involve the use of "cookies" to facilitate your experience. This includes retention of your username and password for the TiVo Community Forum and showing a default Topic View when you visit the Forums. You have the option to turn these cookies off at any time by updating your user profile preferences. If your browser doesn’t support cookies, or if you have cookies turned off, these preferences will not be set.

Purchasing and/or Credit Card Information

TiVo Community Forum strives to maintain strict security for your private information. Our online ordering pages are SSL 128 bit encryted, providing a secure means of ordering our products. We do not maintain any credit card information at TiVo Community Forum, which means that you have to provide it each time you make a purchase, but also means that your information is controlled by you alone.

Disclosure of Personal Information

TiVo Community Forum does not disclose your personally identifying information to any third parties for any purpose without your prior consent. All reasonable care is taken by staff handling personal information to ensure its security both offline and online.

It’s also important to be aware that when you voluntarily provide personal information (e.g., last name, address, phone number) in a posting on the bulletin board, that information is publicly available and may be used by someone in a manner unintended by you. For that reason, we discourage the offering of any personally identifying information within the message board itself.

Privacy for Children Aged 12 and Under

Although the TiVo Community Forum websites are targeted at a general adult audience, we welcome the participation of younger users with their parents’ consent. We strongly recommend that users 12 and under refrain from offering any personal information either in their user profile or in the message boards themselves, and we encourage parents to stay involved in the online life of their children.


Changing or Updating Personal Information

If you would like to update or change your user profile on the TiVo Community Forum message board, please enter the USER CP area on the site.

If you have questions regarding your information, you can contact our Privacy Administrator by using th contact us link at the bottom of the sites pages. .

Whether or not an email address (with no other data attached) is considered 'personally identifiable information' isn't explicitly addressed, however I am of the (entirely unverified) opinion that the site operators do not engage in email harvesting.