Phishing emails appear in thunderbird despite being junked on my ISP site.

My ISP successfully sends phishing emails from a source mimicking my ISP to Junk which then do not appear in the inbox. However, they do appear in TB inbox. How do I stop this. Advice gratefully received.
Regards.

''It seems this email (and others) have their origin in TB. Is this possible?''
No, it isn't. My best guess is the message slipped through your provider's spam filter. You have a POP account and the message gets removed from the server when you download it with Thunderbird.

Similar Messages

My emails appear to be tagged as "junk" on the receiving end. How can I fix this?

When I go into my online Outlook account, I see that emails have been sent (they're in my "sent" folder). But a test message sent to my wife went to her Junk Mail. When I forwarded the original message from the "sent" folder, it went directly to her inbox. Is there a missing tag of some sort?

Part of training the junk filter is also to mark good messages 'As Not Junk'.
http://kb.mozillazine.org/Junk_Mail_Controls#Training_the_Junk_Mail_Controls

Why do my files not appear in Finder despite being otherwise accessible?

Last night I downloaded a bunch of html files via ftp so I could work on a site locally using MAMP.
The site appears in my web browser at localhost:8888/sitename/ and I can navigate round it without any problem but when I went to open the individual pages for editing in Sublime 2 the containing folder appears empty.
If I do Get info the dialogue shows 0Kb and no files. All folder permissions are normal.
After some hunting around I tried searching for the files in Finder only for them to appear in search results.
I can then see and browse the files in the finder search results - Get info on teh folder shows 35MB and the correct number of files.
But if I go back to browsing in Finder the folder shows empty again (intense head scratching).
In Terminal I can cd to the folder and see all of the files no problem.
Running Repair Disk permissions didn't seem to have any effect. I've also tried restarting with no effect.

Launch the Terminal application.
Triple-click the line below to select it, then drag or copy into the Terminal window — do not type — and press the space bar:
ls -Oel
Now switch to the Finder and drag the problem folder into the Terminal window. More text will be added to what you entered.
Click in the Terminal window to activate it, then press return.
Post any lines of output that appear below what you entered — the text, please, not a screenshot.
If any personal information appears in the output, edit before posting, but don’t remove the context.

I'm unable to send an email, i get username or password incorrect despite being correct. Has anyone had this problem before and fixed it?

I'm unable to send an email, i get username or password incorrect despite being correct. Has anyone had this problem before and fixed it?

Are you sure the settings are correct? Did you check the outgoing mail server setting? Make sure that your username and password are in there.
Settings>Mail, Contacts, Calendars>Your email account>Account>Outgoing mail server - tap the server name next to SMTP and check in the primary server and make sure your username and password are entered and correct - even if it says that the password is optional.

I received a phishing email from what I thought was my bank. Do I need to do anything to my MAC for security?

I received a phishing email from what I thought was my bank. Do I need to do anything to my MAC for security? I have no anti-virus software.

Evelyn, there is nothing that can prevent you or anyone from falling victim to those attempts to defraud you – other than you.
"Phishing" scams are the most common way of getting people to voluntarily supply information that should be kept as secure as any other personal possession. "Anti-virus" solutions can't possibly prevent that sort of fraud, and if anything can only lull you into falsely believing you're being protected from threats, be they real or perceived.
Do you have any further advice so that I don't fear my Mac?
There is no reason to fear your Mac; it's a tool to be used for your sole benefit. Like any tool though, it can be misused. If there is any explanation for fear, it's a lack of education. Knowledge conquers fear and renders it inert. Learn what real threats actually exist, how to defend yourself from them, and how to distinguish them from those propagated by fear mongering psychopaths that justify their existence by keeping others misinformed. There are an abundance of the latter.
There will always be threats to your information security associated with using any Internet - connected communications tool:
You can mitigate those threats by following commonsense practices
Delegating that responsibility to software is an ineffective defense
Assuming that any product will protect you from those threats is a hazardous attitude that is likely to result in neglecting point #1 above.
OS X already includes everything it needs to protect itself from viruses and malware. Keep it that way with software updates from Apple.
A much better question is "how should I protect my Mac":
Never install any product that claims to "clean up", "speed up", "optimize", "boost" or "accelerate" your Mac; to "wash" it, "tune" it, or to make it "shiny". Those claims are absurd.Such products are very aggressively marketed. They are all scams.
Never install pirated or "cracked" software, software obtained from dubious websites, or other questionable sources.
Illegally obtained software is almost certain to contain malware.
"Questionable sources" include but are not limited to spontaneously appearing web pages or popups, download hosting sites such as C net dot com, Softonic dot com, Soft pedia dot com, Download dot com, Mac Update dot com, or any other site whose revenue is primarily derived from junk product advertisements
If you need to install software that isn't available from the Mac App Store, obtain it only from legitimate sources authorized by the software's developer.
Don’t supply your password in response to a popup window requesting it, unless you know what it is and the reason your credentials are required.
Don’t open email attachments from email addresses that you do not recognize, or click links contained in an email:
Most of these are scams that direct you to fraudulent sites that attempt to convince you to disclose personal information.
Such "phishing" attempts are the 21st century equivalent of a social exploit that has existed since the dawn of civilization. Don’t fall for it.
Apple will never ask you to reveal personal information in an email. If you receive an unexpected email from Apple saying your account will be closed unless you take immediate action, just ignore it. If your iCloud, iTunes, or App Store account becomes disabled for valid reasons, you will know when you try to buy something or log in to this support site, and are unable to.
Don’t install browser extensions unless you understand their purpose. Go to the Safari menu > Preferences > Extensions. If you see any extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone.
Don’t install Java unless you are certain that you need it:
Java, a non-Apple product, is a potential vector for malware. If you are required to use Java, be mindful of that possibility.
Java can be disabled in System Preferences.
Despite its name JavaScript is unrelated to Java. No malware can infect your Mac through JavaScript. It’s OK to leave it enabled.
Beware spontaneous popups: Safari menu > Preferences > Security > check "Block popup windows".
Popup windows are useful and required for some websites, but unsolicited popups are commonly used to deceive people into installing unwanted software they would never intentionally install.
Popups themselves cannot infect your Mac, but many contain resource-hungry code that will slow down Internet browsing.
If you ever receive a popup window indicating that your Mac is infected with some ick or that you won some prize, it is 100% fraudulent. Ignore it. The more insistent it is that you upgrade or install something, the more likely it is to be a scam. Close the window or tab and forget it.
Ignore hyperventilating popular media outlets that thrive by promoting fear and discord with entertainment products arrogantly presented as "news". Learn what real threats actually exist and how to arm yourself against them:
The most serious threat to your data security is phishing. Most of these attempts are pathetic and are easily recognized, but that hasn't stopped prominent public figures from recently succumbing to this age-old scam.
OS X viruses do not exist, but intentionally malicious or poorly written code, created by either nefarious or inept individuals, is nothing new.
Never install something without first knowing what it is, what it does, how it works, and how to get rid of it when you don’t want it any more.
If you elect to use "anti-virus" software, familiarize yourself with its limitations and potential to cause adverse effects, and apply the principle immediately preceding this one.
Most such utilities will only slow down and destabilize your Mac while they look for viruses that do not exist, conveying no benefit whatsoever - other than to make you "feel good" about security, when you should actually be exercising sound judgment, derived from accurate knowledge, based on verifiable facts.
Do install updates from Apple as they become available. No one knows more about Macs and how to protect them than the company that builds them.
Summary: Use common sense and caution when you use your Mac, just like you would in any social context. There is no product, utility, or magic talisman that can protect you from all the evils of mankind.

Phishing email?

Just received an email from BTFon that looks normal, but the return email address is [email protected] Previously emails from BTFon have been [email protected]
Also all the links within the email start http://email.planning-inc.co.uk/r.emt?h=www.bt.com/btfon&t=
It has the exepected disclaimer at the bottom
To ensure future emails from BT are delivered to your inbox and not treated as spam, please add [email protected] to your address book. This email was sent to you at [email protected] because you subscribe to BT service. This domain is owned by BT and operated by planning-inc, an approved BT supplier
Nominet returns this
Domain name:
planning-inc.co.uk
Registrant:
Digital Data Analysis
Registrant type:
UK Individual
Registrant's address:
Liberty House, 222
Regent Street
London
Greater London
W1B 5TR
United Kingdom
Registrar:
Namesco Limited t/a Namesco Ltd [Tag = NAMESCO]
URL: http://www.names.co.uk
Relevant dates:
Registered on: 26-Aug-2005
Renewal date: 26-Aug-2013
Last updated: 02-Jun-2011
Registration status:
Registered until renewal date.
Name servers:
ns0.syzygy.co.uk 195.26.96.2
ns1.syzygy.co.uk 217.111.103.99
Is this legitimate?
Solved!
Go to Solution.

tomsk wrote:
Just received an email from BTFon that looks normal, but the return email address is [email protected] Previously emails from BTFon have been [email protected]
Also all the links within the email start http://email.planning-inc.co.uk/r.emt?h=www.bt.com/btfon&t=
It has the exepected disclaimer at the bottom
To ensure future emails from BT are delivered to your inbox and not treated as spam, please add [email protected] to your address book. This email was sent to you at [] because you subscribe to BT service. This domain is owned by BT and operated by planning-inc, an approved BT supplier
Nominet returns this
Domain name:
planning-inc.co.uk
Is this legitimate?
Hi. Welcome to the forums.
Please edit your post and remove your email address.
The email is legitimate. BT tends to use that email.planning-inc.co.uk - despite being informed numerous times to stop doing so due to the inherent phishing nature, and that the html doesn't show that website.
I have been saying for years (mainly in the btinternet forums) that they should use bt.com domain, and if they want to use tracking - then they can clearly use forwarding through there.
http://www.andyweb.co.uk/shortcuts
http://www.andyweb.co.uk/pictures

ClamXav detecting phishing email (can't get rid of them)

I received an email from my wife that she did not send me. It was an email that made no sense. It just had a bunch of words in a very long document. I assumed that her email program (Mac Mail) must have become infected with something that sent this email out to everyone in her address book. I deleted the email and downloaded ClamXav to check my system and make sure everything is ok.
Whenever I run ClamXav, it detects 8 files with the following infection name: (Heuristics.Phishing.Email.SpoofedDomain)
I ask ClamXav to quarantine the files, then I go into that folder and delete them. But if I run a check later, those 8 files are back. I can't get rid of them.
I'm wondering if they are reinfecting my Mac Mail program via Apple's mail servers. I'm not sure if all my mail messages are kept on Apple's server, and them somehow these malware files get re-downloaded to my computer. I tried to figure out if there is a setting in my mail program that allows me to uncheck a box that says, "save mail files on server".....but I can't find any such setting. I thought I remember seeing something like that in the past.
Does anyone have any idea what is causing my computer to be continuously reinfected and what I should do about it? I don't notice any problems with my computer, but obviously these files that I can't permanently delete has me worried.

Randall Olson1 wrote:
Whenever I run ClamXav, it detects 8 files with the following infection name: (Heuristics.Phishing.Email.SpoofedDomain)
I ask ClamXav to quarantine the files, then I go into that folder and delete them. But if I run a check later, those 8 files are back. I can't get rid of them.
First, I would encourage you to come to the ClamXav Forum to more quickly and efficiently answer questions such as this.
My standard guidance for handling reported e-mail infection is as follows (pay particular attention to #6):
Never use ClamXav (or any other A-V software) to move (quarantine) or delete e-mail. It will corrupt the mailbox index which could cause loss of other e-mail and other issues with functions such as searching. It may also leave the original e-mail on your ISP's e-mail server and will be re-downloaded to your hard drive the next time you check for new mail.
So, if you choose to "Scan e-mail content for malware and phishing" in the General Preferences, make sure you do not elect to either Quarantine or Delete infected files.
When possibly infected e-mail files are found:
Right-click/Control-click on either the infection or file name in the ClamXav window.
Select "Reveal In Finder" from the pop-up menu.
When the window opens, double-click on the file to open the message in your e-mail client application.
Read the message and if you agree that it is junk/spam/phishing then use the e-mail client's delete button to delete it (this is especially important when the word "Heuristics" appears in the infection name).
If you disagree and choose to retain the message, return to ClamXav and choose "Exclude From Future Scans" from the pop-up menu.
If this is a g-mail account and those messages continue to show up after you have deleted them in the above manner, you may need to log in to webmail using your browser, go to the "All Mail" folder, find the message(s) and use the delete button there to permanently delete them from the server.
To fix corrupted mailbox index(es), highlight each one that was corrupted and choose Rebuild from the appropriate menu.

How do I block phishing emails

Every few days I get a phishing email from the same source. How do I block it so that it never appears in my inbox?

Hi elinorefrombrooklyn,
Thanks for the question. After reviewing your post, it sounds like you are receiving emails that you dont want in your inbox. I would recommend that you read this article, it may be able to help you isolate or resolve the issue.
Mail (Yosemite): Reduce junk mail in your inbox
Thanks for using Apple Support Communities.
Have a nice day,
Mario

How can I delete phishing emails in TimeMachine Backups

I am currently running Maverick, upgraded after a series of crashes and then nice people at Apple Customer Centre helped me to reset my iMac and to install Maverick. I am now also running MacKeeper, which is telling me that it is finding phishing emails (.emlx) files in my Time Machine backs ups. Do I need to delete anything or do I just continue to run scans and quarantine these fines as MK finds them?

Hi Kappy,
Thank you for the feedback, the file appears to be stuck in the library and the same email keeps being found by MacKeeper. Whilst I appreciate that you are not a fan of MacKeeper, it is doing a a job for me. In fact I was with Sophos but I think that this did not do a great job and hence my Mac got corrupted. I do not believe that Macs are not targeted, in fact far from it, I think that the hackers and distributors of viruses, spyware etc are pretty indiscriminate in the targeting!
I think I will stick with MK for the time being and see how it goes, it did clear alot of crap from my disk so for that I am thankful. On the negative side it has definietly slowed up my HD and web browsing experience, but the Mac is running and is relatively safe (for now).
Thanks

Another phishing email

I received a very "professional" email last night from ebilling @ bt.com which contained the BT logo (proper size), my account number asterisked in the usual way, my name, and said :
"We've put your latest BT bill online for you to view.
View your bill now (which was a link)
When you are logged into your account, you can check your recent usage ...... etc etc
Regards
BT.com
This is an automatic email etc etc
British Telecommunications plc etc etc"
No bill was actually due, this wasn't one of the usual prompts you get from BT online services. Foolishly, I clicked on the link to check it out and it took me to the genuine BT website where I logged in and it did display all my old bill details, and what you'd normally find. It was the BT https site as far as I could see.
So I believed it genuine - but I noticed the email appeared to contain an attachment, and BT say they never send attachments. I didn't click on the attachment.
In the light of that, I reported it to BT as a potential phishing scam, and deleted the email (after printing it)
Someone has just phoned me just now, Indian call centre it seemed, and told me it was a scam. In the conversation, I was asked to confirm my details, as one is usually asked. The call from from 08003289393 which is said to be a generic BT number, but I believe isn't secure.
Has anyone else had this email? WAS it a phishing email? If so, it was totally believable.
I've run a full system scam and no malware has been picked up. I've changed my BT password. Anything else I should do?
All advice gratefully received!

Ostrich wrote:
I received a very "professional" email last night from ebilling @ bt.com which contained the BT logo (proper size), my account number asterisked in the usual way, my name, and said :
"We've put your latest BT bill online for you to view.
View your bill now (which was a link)
When you are logged into your account, you can check your recent usage ...... etc etc
Regards
BT.com
This is an automatic email etc etc
British Telecommunications plc etc etc"
No bill was actually due, this wasn't one of the usual prompts you get from BT online services. Foolishly, I clicked on the link to check it out and it took me to the genuine BT website where I logged in and it did display all my old bill details, and what you'd normally find. It was the BT https site as far as I could see.
So I believed it genuine - but I noticed the email appeared to contain an attachment, and BT say they never send attachments. I didn't click on the attachment.
In the light of that, I reported it to BT as a potential phishing scam, and deleted the email (after printing it)
Someone has just phoned me just now, Indian call centre it seemed, and told me it was a scam. In the conversation, I was asked to confirm my details, as one is usually asked. The call from from 08003289393 which is said to be a generic BT number, but I believe isn't secure.
Hi.
What are you using as an email viewer ? Is it webmail or something like Outlook Express or Thunderbird ?
Chances are the attachment could be something like a picture link, rather than a dodgy file attachment.
Also the fact that it was a https is also pretty good. You don't say what the link was ....
The 0800 number is a BT number when they call you. If you dial it, then it says that BT called and nothing else is needed. There is no particular problem with that after you reported the probable phish.
However as you say your bill isn't due, then the email does seem somewhat suspect. If you still had the email, I'd ask you to provide the email headers (removing any personal info) - that is the way to tell for sure (as well as the almost certain dodgy html link)
http://www.andyweb.co.uk/shortcuts
http://www.andyweb.co.uk/pictures

TS1925 iPad IOS 7.0.2 and Mountain Lion 10.8.5 Calendar colors do not match between computer and device. Problem did not exist until updated IOS arrived. Colours change of their own free will despite being corrected on both iPAD and MacBook Pro. Any an

iPad IOS 7.0.2 and Mountain Lion 10.8.5 Calendar colors do not match between computer and device. Problem did not exist until updated IOS arrived. Colours change of their own free will despite being corrected on both iPAD and MacBook Pro. Any answers?

Please do not post the entire messages log as it takes up unnecessarily a lot of space. It seems that there is a corrupt/nonfunctional file called
[email protected]nt.plist
Go to your hard drive, enter library, go into users, and go into launch agents and delete the thing above. Empty the trash and restart.

Why do some emails appear in Intenet Explorer but not on Firefox?

My friend sent an email using a program in which she used her handwriting for the fonts. The email appears clearly when I use Internet Explorer but all that arrives when I use Firefox is a blank page although her name appears in the Inbox. I can't open some emails that require media player, either.
Fafing

Firefox doesn't do email, it's a web browser.
If you are using Firefox to access your mail, you are using "web-mail". You need to seek support from your service provider or a forum for that service.
If your problem is with Mozilla Thunderbird, see this forum for support.
[http://www.mozillamessaging.com/en-US/support/] <br />
or this one <br />
[http://forums.mozillazine.org/viewforum.php?f=39]

I received a phishing email supposedly from my bank and clicked on url - didn't enter any data though.Bank says to get ipad checked for viruses,but I understood ipad has built in security.I've cleared cookies in safari via settings. Anything else to do?

I received a phishing email supposedly from my bank and clicked on url - didn't enter any data though.Bank says to get ipad checked for viruses,but I understood ipad has built in security.I've cleared cookies in safari via settings. Anything else to do?

I know this has been solved as you reported, but I think you need to check with your e-mail provider. Did you also get this same e-mail on your computer? If you use the same ID for e-mail on computer and ipad, it should have appeared on both. It's very common spam. Check your computer to see if on it, the e-mail is in spam, or, if you deleted it on your ipad, check your recently deleted e-mails.
You might want to consider changing your password, though people sending spam, don't need it. My e-mail provider had me change my password, not because I was getting spam, but unknown to me, I was sending it! (You'll still get some spam, though.) It's when you learn that you're unknowingly sending spam...that you must change your password.
Hope this helps.
(Ss I was sending this, I just got an e-mail notification from the Nigerian... it got to my e-mail instead of going to spam.)

What to do about Phishing emails

As like most people I am getting fed up with Phishing emails pretending to come from BT etc etc and have no real idea if anyone is trying to do anything about it i have started to do something myself.
On some of them particularly those with "Buttons" you can see the routing to where the Trojan programme etc is located.
I now email the owner of the site either by any contact information given or by looking it up on "Whois" if it is shown as a numeric.
I then send them a polite message saying that it looks as though there site has been hacked and they are hosting a programme that is used for Phishing.
So far i have sent 10 and got 8 replies 4 said they have removed the link and the associated account 4 said that they have left the link but advised the local police regarding the fraud.
So far i have had replies from the Phillapines, China and Malaya.
I have no illusions that this will stop it but it might dent it more than seems to be dane by anyone else.

Like you, I'm more than cheesed off with daily, false, "BT" emails but there is another issue, which so far I can't see anybody has raised i.e....... probably like everyone else I've sent countless copies of fakes to "Phishing" and to "Abuse" at BT only to receive the same pointless standard answers, with no action, from BT.
It is just not good enough for BT to fob off these complaints from many, many people, by saying that they (BT) can only do something if fake emails come from BT source / customer ..... these fake emails are leading unsuspecting people to believe that they are genuine and in any other (business) circumstance, this could be treated as fraud or misrepresentation, and could be actioned on by law enforcement / Trading Standards.
Does BT not care that their Logos / Headings / personnel are all clearly being massively misrepresented, day after day to countless numbers of their clients, all with an end view to illegal activity being carried out by the sender ??????
How much longer before senior personnel get off their rear ends and do something, instead of cowering behind their standard replies and paying lip service only to this problem, a problem which has existed for years, and is now increasing due to BT changes, and to get their vast resources to take action on this criminal activity, which we, as high cost paying customers, are expected to endure ???

Emails appearing opened

Emails coming to my device appear as already read eventhough I haven't opened them yet. I have a Q10 but had this issue with my Bold as well. My service provider is Rogers and the emails are from my @rogers account. Would this be a setting on the email preferences on my home computer (I use Mac mail) or on the actual device?

Hello pgitlin,
Welcome to the BlackBerry Support Community.
Thank you for your question regarding email appearing as opened when received on your BlackBerry Q10 smartphone.
In most cases, this occurs when a message is being marked as read on the mail server and reconciling to the BlackBerry smartphone.
You can verify this by viewing the messages on a webmail login to see if they also appear as read. If all else fails you may want to contact your mail service provider to investigate.
-FB
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.
Click "Accept as a Solution" for posts that have solved your issue(s)!

Phishing emails appear in thunderbird despite being junked on my ISP site.

Similar Messages

Maybe you are looking for