Community Forum

email claiming Comcast email hack & ransomware

New Poster

email claiming Comcast email hack & ransomware

The only reason I took this as credible was that they claimed to have my password.  They in fact had all but one character of a very unique password although I've not used it for quite some time.

 

The originating IP appears to be Tarnowskie Góry, Poland.

 

Received: from dovdir1-asc-01o.email.comcast.net ([96.114.154.181])
    by dovback1-asc-01o.email.comcast.net with LMTP id UGixJ29gJlxXfAAAF5NVng
    for <redacted>; Fri, 28 Dec 2018 17:42:07 +0000
Received: from dovpxy-asc-01o.email.comcast.net ([96.114.154.181])
    by dovdir1-asc-01o.email.comcast.net with LMTP id 0Op8J29gJlxQfwAAzTWhxg
    ; Fri, 28 Dec 2018 17:42:07 +0000
Received: from resimta-po-34v.sys.comcast.net ([96.114.154.181])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    by dovpxy-asc-01o.email.comcast.net with LMTP id yKoJEGZgJlwsEQAAyeh4YQ
    ; Fri, 28 Dec 2018 17:42:07 +0000
Received: from un-101-11.static.sitel.net.pl ([178.19.101.11])
    by resimta-po-34v.sys.comcast.net with ESMTP
    id cw97gnZ7BkJJqcw98guBIF; Fri, 28 Dec 2018 17:42:07 +0000
X-CAA-SPAM: N00001
X-Xfinity-VAAS: gggruggvucftvghtrhhoucdtuddrgedtledrtdehgddutdehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuvehomhgtrghsthdqtfgvshhinecuuegrihhlohhuthemuceftddtnecuogfirggsrhhivghlucdlfedttddmnecujfgurhepkffhvffuffggtgfgrfgioffqsehtkeejtddutdernecuhfhrohhmpeeovghnrhestghomhgtrghsthdrnhgvtheqnecukfhppedujeekrdduledruddtuddruddunecurfgrrhgrmhephhgvlhhopehunhdquddtuddquddurdhsthgrthhitgdrshhithgvlhdrnhgvthdrphhlpdhinhgvthepudejkedrudelrddutddurdduuddpmhgrihhlfhhrohhmpegvnhhrsegtohhmtggrshhtrdhnvghtpdhrtghpthhtohepvghnrhestghomhgtrghsthdrnhgvthenucevlhhushhtvghrufhiiigvpedt
X-Xfinity-VMeta: sc=300;st=spam
X-Xfinity-Message-Heuristics: IPv6:N;TLS=0;SPF=4;DMARC=F
Message-ID: <822691451235F2C662D5015671B68226@OEPMDBG4>

 

 

 

 

 

 

 

Expert

Re: email claiming Comcast email hack & ransomware

It's a known scam. However, your password is insecure and you should change it immediately if you haven't done so already.

 

Consider enabling two-step authentification to keep your account secure in the future.

 

You can always reach out to these folks if you have any other security-related concerns:

 

 

Customer Security Assurance 

    • Business Hours: 6:00am - 2:00am EST, 7 days a week
    • Contact: 1-888-565-4329

 

 


I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!