View Full Version : updated-password - orcon

09-10-2005, 10:06 AM
Gidday guys, today I just received an email from orcon.
Dear user mrbeef,

You have successfully updated the password of your Orcon account.

If you did not authorize this change or if you need assistance with your account, please contact Orcon customer service at: service@orcon.net.nz

Thank you for using Orcon!
The Orcon Support Team

It also had an attachment...updated-password.zip
With a file in it named - updated-password.htm .pif
I found this very very pecular(sp?)

So i didnt open the file, and deleted the email.
The thing is i changed my email password like 6 months ago. And I find it weird they only just send it now...weird.

+++ Attachment: No Virus (Clean)
+++ Orcon Antivirus - www.orcon.net.nz

09-10-2005, 11:28 AM
virus me thinks
But ring them to confirm if they did infact send it

09-10-2005, 11:35 AM
Indeed it is a virus. A slight variation on the wording on this one: See here (http://www.orcon.net.nz/help/kb/email/67493/)

How did you know what the attachment contained without opening it? You didn't use the preview function did you? If you did, then update your antivirus program and give your system a complete scan just to make sure you haven't been infected.

09-10-2005, 01:16 PM
Everyone should know by now ISPS, nor banks send people notes like this about passwords.
In fact the staff at Orcon probably neither know nor care you chnaged your password. They can't see it. They can chnage it but not view what it is. There is no software recording what changes you have made to it either.

09-10-2005, 03:22 PM
It also had an attachment...updated-password.zip
With a file in it named - updated-password.htm .pif
Notice the double extension on the filename? That ".pif" bit is a classic example of a virus infected file.

It's a good thing you deleted it - hopefully bypassing the recycle bin.

09-10-2005, 04:09 PM
Just remember...

With email you cannot trust that the From address is legit.

I've seen many an email at work reporting to be from admin or postmaster etc.
I've even had the odd fellow employee ring up saying "what the @##$ are you doing sending me this" ... of course it wasn't me :mad:

09-10-2005, 04:18 PM
well i opened the .zip file and said nah bugger that.

it am now deleted.