[sprite1950]

Today I got a confirmation email of something I haven't ordered. It's a no reply email and gives an order/part number. It also had my address and landline number on it which is worrying.

Unfortunately it gave a link where I could get details of the order which I clicked on because I do order stuff that I forget about sometimes. Surprise, surprise there was nothing there! I checked my bank account and paypal but everything seems ok and I ran Malwarebytes but it didn't show anything. What should I do?

[nela13]

That is odd, but if you ran the malware program and if your computer is clean maybe it is everything ok.
Usually we get the confirmation email right after the order, if you didn't order something I think you should contact the paypal or your bank to check if there is a transation done or to be done.

[sprite1950]

That is odd, but if you ran the malware program and if your computer is clean maybe it is everything ok.
Usually we get the confirmation email right after the order, if you didn't order something I think you should contact the paypal or your bank to check if there is a transation done or to be done.

The order date was given as yesterday but I didn't order anything. It looks genuine and there are no spelling mistakes which you often get with spoof emails. The only thing I did yesterday was cash out at the ForumWheel but I don't think it's anything to do with that.

I have a feeling it might be something to do with my online activites though. I just hope everything will be ok. I might contact the bank and tell them what has happened.

[Lexi]

It's a fraud email, and if you have gmail what you can do is hover over the bold type (who sent it) and it will come up with the email address. Then you will see who has sent it.

I used to get lots of these, what you can do is an internet search of the email address to see if it has been reported. Sometimes this do this so you then check your bank account and other accounts if they are tryign to hack into your email.

Be very careful. You can PM me the email address for me to check if you like?

[skysnap]

It seems like an odd mail. So basically a spam or the scam bait. Make sure you don't pay for anything you didn't ordered.

[CyberFreak]

Never click any links in emails especially suspicious ones. If it gives a company name, access their website directly if you are unsure if the email is legit.

This is a spam email that is probably using stolen information on you (maybe from the CS hack?) and I have quite a few of these type ones usually with attachments though but I just ignore them. Additionally I disabled forwarding from the email I used for CS when the hack occurred as that was being spammed a lot so that along with the email containing your name and address makes me think it might be from the CS hack or a similar one where they got hold of a decent amount of info on you to make it convincing.

[Lexi]

Never click any links in emails especially suspicious ones. If it gives a company name, access their website directly if you are unsure if the email is legit.

This is a spam email that is probably using stolen information on you (maybe from the CS hack?) and I have quite a few of these type ones usually with attachments though but I just ignore them. Additionally I disabled forwarding from the email I used for CS when the hack occurred as that was being spammed a lot so that along with the email containing your name and address makes me think it might be from the CS hack or a similar one where they got hold of a decent amount of info on you to make it convincing.

What is the CS hack? If you use gmail you can hover over the sender to see what email they did use and it's a better indication of who actually sent it. I've taken to doing that now while scanning vague headers.

[sprite1950]

Lexi has helped me with this and I have also reported it to Action Fraud who have given me a free site where I can check my credit details. I have changed all my passwords and I am keeping an eye on my bank details too but so far everything seems ok. It's really worrying though.

It could also be as a result of the TalkTalk hack as I am with them.

[CyberFreak]

Never click any links in emails especially suspicious ones. If it gives a company name, access their website directly if you are unsure if the email is legit.

This is a spam email that is probably using stolen information on you (maybe from the CS hack?) and I have quite a few of these type ones usually with attachments though but I just ignore them. Additionally I disabled forwarding from the email I used for CS when the hack occurred as that was being spammed a lot so that along with the email containing your name and address makes me think it might be from the CS hack or a similar one where they got hold of a decent amount of info on you to make it convincing.

What is the CS hack? If you use gmail you can hover over the sender to see what email they did use and it's a better indication of who actually sent it. I've taken to doing that now while scanning vague headers.

The Clixsense hack. I had a unique forwarding only email with them that got spammed with a lot of emails after the hack until I bothered to disable it. They also held addresses, names etc so that information can be used to construct scam emails like this that look convincing.

[sprite1950]

Never click any links in emails especially suspicious ones. If it gives a company name, access their website directly if you are unsure if the email is legit.

This is a spam email that is probably using stolen information on you (maybe from the CS hack?) and I have quite a few of these type ones usually with attachments though but I just ignore them. Additionally I disabled forwarding from the email I used for CS when the hack occurred as that was being spammed a lot so that along with the email containing your name and address makes me think it might be from the CS hack or a similar one where they got hold of a decent amount of info on you to make it convincing.

What is the CS hack? If you use gmail you can hover over the sender to see what email they did use and it's a better indication of who actually sent it. I've taken to doing that now while scanning vague headers.

The Clixsense hack. I had a unique forwarding only email with them that got spammed with a lot of emails after the hack until I bothered to disable it. They also held addresses, names etc so that information can be used to construct scam emails like this that look convincing.

Is it just scaremongering then or should I be really concerned that someone might have stolen my identity? Even though nothing has happened apart from this email I'm worried that it might.

[Lexi]

Never click any links in emails especially suspicious ones. If it gives a company name, access their website directly if you are unsure if the email is legit.

This is a spam email that is probably using stolen information on you (maybe from the CS hack?) and I have quite a few of these type ones usually with attachments though but I just ignore them. Additionally I disabled forwarding from the email I used for CS when the hack occurred as that was being spammed a lot so that along with the email containing your name and address makes me think it might be from the CS hack or a similar one where they got hold of a decent amount of info on you to make it convincing.

What is the CS hack? If you use gmail you can hover over the sender to see what email they did use and it's a better indication of who actually sent it. I've taken to doing that now while scanning vague headers.

The Clixsense hack. I had a unique forwarding only email with them that got spammed with a lot of emails after the hack until I bothered to disable it. They also held addresses, names etc so that information can be used to construct scam emails like this that look convincing.

Ah! I did sign up but stayed with them for about 2 days and never entered any information as far as I remember. I didn't know they had been hacked, which does make me wonder about all those other sites like MintVine and InstaGC who demand to have your home address and phone number before you can cash out. It was good you were able to figure it out.

This is another reason I try not to sign up to too many sites and I really should go back and delete some information.

[sprite1950]

The Clixsense hack was quite hideous. It started with members being directed to gay porn sites every time they tried to access the site. They managed to fix that and a short time later we all noticed that the amounts in our account had changed (mine went from $88 to $40) and most of the profile names showed as 'Hacked' rather than the user name!

Jim, the owner, assured us that our most sensitive details were safe .. but who knows, maybe the hackers got more than we thought.

[nela13]

The Clixsense hack was quite hideous. It started with members being directed to gay porn sites every time they tried to access the site. They managed to fix that and a short time later we all noticed that the amounts in our account had changed (mine went from $88 to $40) and most of the profile names showed as 'Hacked' rather than the user name!

Jim, the owner, assured us that our most sensitive details were safe .. but who knows, maybe the hackers got more than we thought.

I need to check what kind of personal information I have in clixsense, I know I don't have my adress there but I have my paypal details and that is worrying...

[CyberFreak]

Is it just scaremongering then or should I be really concerned that someone might have stolen my identity? Even though nothing has happened apart from this email I'm worried that it might.

I wouldn't be especially worried about this case. You should always be watching out for anything suspicious anyway and personally I would say if you were keeping an eye on your bank accounts, credit record etc anyway then you shouldn't really be anymore worried or do anything else special because of this. If your data was leaked from the TalkTalk hack, I would imagine alot of financial companies are watching the accounts etc of people involved and if many start having suspicious activity in that group then they will be alerted. My employers payroll information (over 100,000 peoples data) was leaked online a few years ago and they automatically alerted banks etc and we got told that they would keep watching them and detect if there was a spike in suspicious activities at any point from the affected accounts. Nothing bad happened to any staff member from what I believe to this day as a result of the leak. I imagine it was the same with the TT hack.

Jim, the owner, assured us that our most sensitive details were safe .. but who knows, maybe the hackers got more than we thought.

Well initially he said it was all safe but then a day later he then announced that information had been stolen and it was posted on pastebin and available for sale.
https://haveibeenpwned.com/PwnedWebsites#ClixSense

[sprite1950]

CyberFreak wrote:

Well initially he said it was all safe but then a day later he then announced that information had been stolen and it was posted on pastebin and available for sale.
https://haveibeenpwned.com/PwnedWebsites#ClixSense

Oh how depressing, I didn't know that. Still it's done now and I shall just have to keep an eye on things.

[peachpurple]

It is best to change your paypal, email and that site passwords at once. Then, you should inform that site that you didn't order anything. Somebody might had hacked into your account on that site

[Happyland]

It is good practice to check your credit report. Checking at least every two years is ok. I would prefer to check every year. Someone should check more often if they are suspicious or have a reason to check. There are services that will monitor your credit and report suspicious activity. This will usually involve a fee. Pay attention to all letters you receive regarding important data such as financial transactions etc.