• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos4 Stats

Possible Phishing/Spam Email

Don't know if anyone else has received the following suspicious email so just wanted to share.  I don't know this person and have blocked future emails and deleted the original.

From: Norton Community [mailto:noreply@nortoncommunity.symantec.com]
Sent: Saturday, November 25, 2017 6:35 AM
To: My email address
Subject: New private message at Norton Community.

Hi (My User ID)

This is an automatic reminder from the site Norton Community. You have received a new private message from LauraRalph.

To read your message, follow this link:
(Message Link)

If you don't want to receive these emails again, change your preferences here:

(Message Link)

The email basically said he/she was a sergeant in the U.S. and provided a Gmail email address and said to email back and I would be told why I had been contacted.  I traced the IP Address and this was the info returned.

Details for 167.89.84.104

IP:167.89.84.104

Decimal:2807649384

Hostname:o1678984x104.outbound-mail.sendgrid.net

ASN:11377

ISP:SendGrid

Organization:SendGrid

Services:Likely mail server

Type:Corporate

Assignment:Static IP

Blacklist:

Continent:North America

Country:United States 

State/Region:Colorado

City:Denver

Latitude:39.7525  (39° 45′ 9.00″ N)

Longitude:-104.9995  (104° 59′ 58.20″ W)

Postal Code:80202

Replies

Kudos2 Stats

Re: Possible Phishing/Spam Email

Hi bxcrwlly:

Thanks for the heads up.  I had two notifications from the Norton Community (noreply@nortoncommunity.symantec.com) in my Inbox this morning stating "This is an automatic reminder from the site Norton Community. You have received a new private message from LauraRalph."

I wasn't familiar with the username and when I checked their user profile at https://community.norton.com/en/user/11490761/activity-log it showed they registered on the forum less than 24 hours ago (24-Nov-2017) and have made no activity (0 posts).  I searched the forum for "LauraRalph" I came across your thread, which confirmed my suspicions.

I haven't read the PMs from this user but I imagine it's the same spam / phishing message you received.  Now all we need to do is find a Norton employee who works on the weekend and is able to inactivate LauraRalph's account.

EDIT:

I clicked the Notify a Moderator link asked them to read your post and delete LauraRalph's account.  Hopefully one of the forum mods will get the message and take action.

Kudos0

Re: Possible Phishing/Spam Email

I got that one too. Thanks posting.

DON'T reply to it anyone.

Hugh
Kudos0

Re: Possible Phishing/Spam Email

I had two private messages as well. Hope an admin gets this before someone follows up on something malicious .

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.125 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: Possible Phishing/Spam Email

I also received a msg from Sgt. (!) Laura Ralph:

I'm Sgt Laura Ralph from USA

Email me right now at

(  sergeantlauraralph7@gmail.com )

I will tell you in details the reason why i contacted you there ok.

Someone, ideally a Norton employee, should report this person to Google as well. 

Kudos2 Stats

Re: Possible Phishing/Spam Email

As an update, I contacted Norton Support via Chat and provided information regarding this incident and requested they escalate, as appropriate.  The tech in Chat said he would escalate to the proper person/department.

Kudos0

Re: Possible Phishing/Spam Email

I am pretty shocked your private message inbox does not have any options to report an inappropriate message.  You have delete and block, which does nothing beyond an individual's inbox.  A security company like Norton should have stronger ability to report an inappropriate sender, whether spam, phishing or worse.  You are responsible for the content and safety of your website with participants who own your security software.

Kudos0

Re: Possible Phishing/Spam Email

I  see the forum has a "notify a moderator" but the private message inbox does not, and needs that protection.  Here is phishing spam inbox message I want to report.

Kudos0

Re: Possible Phishing/Spam Email

I got the same private message & came here to report it. I didn't email her though. Anyone who did email her might wanna change their email password & check all recent transactions on their credit cards because she may have tricked you into giving her some of your private information.

Kudos0

Re: Possible Phishing/Spam Email

Got this message from Laura Ralph right now , too.
This is not very convincing from Norton that now at 16:14 CET this stuff is still being delivered. I have blocked this address and of course, I didn't answer.

Kudos0

Re: Possible Phishing/Spam Email

Hi there,

I got this (pic attached) personal message on your norton community. And I think it's spam cuz he used gmail. Norton will never send this message. 
Block the user from accessing norton forum. Cuz if I recvd msg then he must have sent this message to mass users.

Thanks

Yogesh

Kudos0

Re: Possible Phishing/Spam Email

I also got this notification of a private message from the same community user (Laura Ralph). I'm located in the UK.

Is this a spam email pretending to be from Norton Community, or is it genuinely sent through the community forum ? If the latter, then this is very disappointing that a security service provider has allowed this to happen. NOT GOOD ENOUGH !

Norton/Symantec need to disable this asap, investigate what threats this might pose to users' devices and issue a statement and any necessary mitigating actions for users that were targeted by this personal message.

Kudos0

Re: Possible Phishing/Spam Email

Have a look a this thread https://community.norton.com/en/forums/possible-phishingspam-email, and see how many other users received that PM.

Next time you want to post an image, please do it within your post so that it is immediately visible: Here is how to do it:  How to post an image in the forums .  Thanks.

Windows 7 HP SP1 32-bit | Chrome 63.0.3239.108 | NS 22.11.2.7
Kudos1 Stats

Re: Possible Phishing/Spam Email

I received the same message.
Kudos0

Re: Possible Phishing/Spam Email

Walkingman. When a person registers here on the forums admin's do not know they are doing things that are nefarious until something as this takes place. These messages are NOT from anyone connected with Norton or Symantec. Just a spammer trying to duped others. Common sense prevails when this happens in that the person receiving the message look it over carefully and not response to someone they don't know and certainly not click on any links in the message. This has been reported. Please also remember we are on a weekend and holiday weekend at that. An admin will handle this as soon as they become aware of it.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.125 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: Possible Phishing/Spam Email

Have a look a this thread https://community.norton.com/en/forums/possible-phishingspam-email, and see how many other users received that PM. You may want to post there as well?

Windows 7 HP SP1 32-bit | Chrome 63.0.3239.108 | NS 22.11.2.7
Kudos0

Re: Possible Phishing/Spam Email

All: This has been reported, hoping an admin drops in soon.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.125 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos1 Stats

Re: Possible Phishing/Spam Email

SoulAsylum - I appreciate the points you made but there are some tell-tale signs that something is going on with this rogue user account. Firstly, a quick check on the profile reveals the account was created less than 24 hrs before the personal messages were sent, and there is no history of the user contributing to or creating any posts. The PM was not linked to any forum threads, so one has to wonder if that is 'normal'. There must also be some way of monitoring how many people were sent a PM from this user in a short space of time time, so if this number was greater than might normally be expected, putting all this together should have sounded some alarm bells. Perhaps there are some lessons to be learned regarding analysis of suspicious behaviour so as to block such activity until a moderator can perform some additional checks. It would be similar to your bank spotting suspicious activity on your account or credit card and is surely not beyond the capabilities of Symantec.

I know hindsight is a great thing, but there is also something called pre-emptive actions.

Kudos0

Re: Possible Phishing/Spam Email

Ditto.

"Life opens up when you do." - Procter & Gamble
Kudos0

Re: Possible Phishing/Spam Email

Me, too!  I opened the following thread in the forum Norton Internet Security, and asked that Norton have a "notify a moderator" in the inbox like in the forum to report this phishing scam problem.

https://community.norton.com/en/forums/violation-private-message

Kudos0

Re: Possible Phishing/Spam Email

You make an excellent point about Notify a Moderator for PMs and I'm sure that this facility will be mainly tightened up.

Unfortunately often in every situation we learn most when things go wrong! That was a lesson I learned some 55 years ago when joining a startup company as number 2 (that's all we were then!) and the Manager sat me down and said "If you don't tell me right away when things go wrong you won't last long here! If I don't know about the bad news how can we put things right!

Hugh
Kudos0

Re: Possible Phishing/Spam Email

Is anyone else getting spam private messages? How do we report them to the site's admins?

Kudos0

Re: Possible Phishing/Spam Email

Hello , Good evening ,

Sorry for this break . It's to signal a spam boot on the forum which send private message :

LauraRalph :

I'm Sgt Laura Ralph from USA

Email me right now at

sergeantlauraralph7@gmail.com )

I will tell you in details the reason why i contacted you there ok.

 You can block this boot .

Kudos0

Re: Possible Phishing/Spam Email

If the problem is this widespread then someone from Norton needs to deal with this ASAP.  I see LauraRalph's account at https://community.norton.com/en/users/lauraralph is still active and they're logged in right now spreading more mischief.

Have any of the Gurus following this thread posted in the private board they share with the Forum Mods or sent an @mention to a Norton employee just in case they're monitoring their e-mail this weekend?

EDIT:

I spoke too soon.  LauraRalph was just banned from the forum and their account is now inactive.

Kudos0

Re: Possible Phishing/Spam Email

There's been a flood of GURU activity here and beind the scenes and you can see the initial result.

Hugh
Kudos0

Re: Possible Phishing/Spam Email

See  Phishing/Spam Email here.

Initial action to ban sender ahs been taken

Hugh
Kudos1 Stats

Re: Possible Phishing/Spam Email

Hi tanaka59:

Thanks for the warning.

There's a discussion about this private message in bxcrwiily's thread Possible Phishing/Spam Email over in the Forum Feedback board.  I just checked LauraRalph's account at https://community.norton.com/en/users/lauraralph and they've just been banned from the forum and had their account inactivated.

Kudos0

Re: Possible Phishing/Spam Email

It isn't "spam" in private email that I get, I get the one from a pretend-a-be cop needing my information - that, for the newbie Norton techs, is what professionals referred to as 'phishing' - unless Norton has changed phish to spam this week.  Doesn't say much for Norton's keen interest in protecting it's customers - even in a private Norton Forum email.

Norton should consider being pro-active, not post-reactive.

~~Will split atoms in exchange for ride back to home planet~~
Kudos1 Stats

Re: Possible Phishing/Spam Email

Please - lose the "Auto Saved" popover showing up every 7 seconds!
and every time the mouse is clicked over a typo, every time there IS a typo, and every time the Enter key is hit.

Another example of Norton's professionalism!

~~Will split atoms in exchange for ride back to home planet~~
Kudos0

Re: Possible Phishing/Spam Email

All: The user account was disabled and they are banned.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.125 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: Possible Phishing/Spam Email

All: The user account was disabled and they are banned.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.125 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: Possible Phishing/Spam Email

All: The user account was disabled and they are banned. I created a post in the Guru area and it never saved. Just went to the forums home page and was never created. I now see it in the open forums, of course not where it belongs and cannot open it since I get "access denied". So several hours ago the attempt was made to notify an admin on my part.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.125 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: Possible Phishing/Spam Email

@SoulAsylum: "Please also remember we are on a weekend... " This s is exactly why this happens today and what this Laura Ralph is remembering. Dear Laura Ralph or whatever you are, please do not spam us on weekends anymore.

Kudos0

Re: Possible Phishing/Spam Email

So what measures have been put in place to stop Laura Ralph and her like setting up a new account and sending more malicious PM's ?

Kudos0

Re: Possible Phishing/Spam Email

WalkingMan:

So what measures have been put in place to stop Laura Ralph and her like setting up a new account and sending more malicious PM's ?

I would hope they won't tell any of us out here in public -- last thing spammers need is help in what to break or work around. 

But let's wait and see now that they have blocked the spammer's account.

Hugh
Kudos0

Re: Possible Phishing/Spam Email

Has this person been reported to Google as well, given that he or she is using a Gmail account too?

Kudos0

Re: Possible Phishing/Spam Email

We should stop thinking about a person whose name or account has something in common with any real existing 'Laura Ralph". If there is existing any gmail account according this name, nobody can say if this account has not been hacked this time.

Kudos0

Re: Possible Phishing/Spam Email

Thanks

Kudos0

Re: Possible Phishing/Spam Email

Please - lose the "Auto Saved" popover showing up every 7 seconds!

This issue is being worked on by the forum developers. Stay tuned.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Possible Phishing/Spam Email

Peterweb,

If you have any input with the developers might I suggest that you suggest to them making it easier to report future miscreants to the admins. I still haven't found a way to do that other than by a forum post like this or a private message (but then I still haven't hound a place where they are listed so I can message them, I found an old message from Tony W so I had his address and sent him a message, but I don't know if he read it yet).

Kudos0

Re: Possible Phishing/Spam Email

sewing1243

Tony W does check this Forum Feedback board as part of his Forum Admin duties. Plus, like you, I, and others have contacted the forum admins to have them look into this PM spamming.

Things happen. Export/Backup your Identity Safe data.
Kudos3 Stats

Re: Possible Phishing/Spam Email

Hi folks, 

Thanks for reporting this on time. We are investigating on how this mass spamming happened via PM. 

We've banned the LauraRalph account. 

We will also look into the above mentioned suggestions. Thanks

Sorry for the inconvenience caused.

Mohanakrishnan G | Norton Forums Administrator | Symantec Corporation
Kudos0

Re: Possible Phishing/Spam Email

I was so excited to see a PM ;-)  Then i was like, what?  Not gonna lie, i really want to respond to that person and pull a James Veitch (laughs)  Now, i know when i send messages through amazon, their system seems to intuitively scrub links...  

On a side note, is anyone else perturbed with the green "autosave" bar that flashes every so often and blocks your text as you type?

Hoping that everyone had a good Thanksgiving,

Sincerely,

H.B.  

Kudos1 Stats

Re: Possible Phishing/Spam Email

Yes, the green "autosave" is really always on and you cannot see what you type  - horrible.  It flashes every second.

Kudos0

Re: Possible Phishing/Spam Email

Hi Mohan_G:

I just received a new private message from Sgt Laura Ralph urging me to contact them at their gmail address - this time from new account Ralph2 at https://community.norton.com/en/users/ralph2.

Kudos0

Re: Possible Phishing/Spam Email

@ imacri Same email address? Like I said before, someone from Norton should alert Google about this abuse.

Kudos0

Re: Possible Phishing/Spam Email

MyName13:

Yes, the green "autosave" is really always on and you cannot see what you type  - horrible.  It flashes every second.

Please see my post https://community.norton.com/en/comment/7727251#comment-7727251 in your thread.

Windows 7 HP SP1 32-bit | Chrome 63.0.3239.108 | NS 22.11.2.7
Kudos0

Re: Possible Phishing/Spam Email

dfkettle:

@ imacri Same email address? Like I said before, someone from Norton should alert Google about this abuse.

Hi dfkettle:

Yes, same e-mail address, identical in content to what MyName13 showed <here> but with the subject line "Hi dear".  I believe the first two PMs I received (now deleted) were much longer messages.

If you google "Sgt Laura Ralph" you'll see various scams dating back years being reported for this "persona" with @gmail, @yahoo, @blaze.uu.ru, etc. e-mail addresses.

The e-mail address used in the private messages (PMs) isn't really the issue, though.  The problem is that Norton is allowing this person to register multiple user accounts in this forum (LauraRalph, now Ralph2) and immediately send out masses of private messages to other users before they've made a single post in the public forum.

Kudos0

Re: Possible Phishing/Spam Email

Yes, lots of Laura Ralph in search.  What is different this time, it is scamming inside a big company that sells security products.

Kudos0

Re: Possible Phishing/Spam Email

G-mail is notorious for scammer and hacks. Personally I have had the gmail domain in its entirety completely banned on my gaming forums since day one. Never have an issue with spammers getting in and doing this. Just a thought out to those who can make the changes. I ALSO know there are legit gmail accounts out there however, Google, should be notified as others has brought to light. Although time intensive for the Admins all new accounts should be screened before approval. Other thoughts are this person obviously has to have a Norton account of some sort to be able to create an account here and log in. Worth investigation and shutting that down as well.

Cheers

"From DOS to Windows10 what a journey it has been" Windows 10 Professional x 64 Fall Creators Update version 1709 / build 16299.125 / NSBU 22.11.2.7 Traditional / Norton BETA tester
Kudos0

Re: Possible Phishing/Spam Email

Hello ,

I have received a new private message which come from now Ralph2 ...

I think that this member it's a boot and which targets random members ...

@SoulAsylum     

If you want block a domain mail for Google , you must block @gmail.com and @googlemail.com , it's the same smtp ...

Even with Yandex ! But here it's a crazy system . If you own a mail adresse with this smtp "@yandex.com"  all smtp here responding in the same mail :

"@yandex.ru"
"@yandex.ua"
"@yandex.kz"
"@yandex.by"
"@yandex.uz"
"@yandex.tj"
"@yandex.az"
"@yandex.lv"
"@yandex.ee"
"@yandex.lt"
"@yandex.fr"
"@yandex.tm"
"@yandex.md"
"@yandex.com.tr"
"@ya.ru"

It's a good new when you want block a complet provider .