4
Spam hitting many customers
Question asked by Montague WebWorks - 12/8/2023 at 8:27 AM
Unanswered
Hey all, I am beginning to receive emails to some accounts on my server purporting to be me and supposedly confirming the person does want to delete their email account. In the past a couple of my customers had fallen for the "your annual domain listing fee" not realizing it's a scam, so I'm concerned that some may fall for this thing, too.

Is there any way to search all accounts for specific text, so I can see how widespread this is, and potentially block those emails? Text is below. The IP number is located in Hungary. Hah!

Thanks,
Mik

-----

Dear Montague Webworks ,

Thank you for being a valuable customer for Montaguewebworks.Com.

Referring to your e-mail service deletion request, a ticket has been created and will take up to 72 Business Hours to complete this request.

Request was made on FrIday Dec 8, 2023 using “Dell Inspiron” IP (136.23.6.96).

Based on the new IP location, we found this as a matter of concern for the safety of you and your e-mail account, if you find this an error or an issue with your account.

To report this issue with your account and to stop service deletion, call support helpline at 1-682-626-8746

Simply ignore this e-mail if you want your account to be deleted and request will be executed within a span of time.

Please take necessary backups of all your Contacts, e-mails, and documents as no data can be recovered once account is deleted.

Assuring you of our best service at all times.

Regards,
Account Support Team
1-682-626-8746
Mik MullerMontague WebWorks

5 Replies

Reply to Thread
0
Ron Raley Replied
Mik, if you aren't able to figure out how to search for the text server-wide, try your SMTP / Delivery logs. If the messages share similar properties, you should be able to grasp the frequency of such emails. 
3
kevind Replied
Montague, vote for this thread if you haven't already:

Find and Delete Malicious Emails

EDIT: Just saw you had several posts on that thread, so guessing you already voted for it. :)
0
Montague WebWorks Replied
Ron, the two I received were from different email addresses and IP numbers. That's about all we can search on in the logs, I believe?
Mik MullerMontague WebWorks
0
Tony Scholz Replied
Employee Post
Mik, 

A good way to see how wide spread this is is to search the Message Archive if it is enabled on the server, This will give you a good idea of who got the message 

Thank you
Tony Scholz
System/Network Administrator
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
Montague WebWorks Replied
Right! Yes, I have two. I'll go check.
Mik MullerMontague WebWorks

Reply to Thread