This topic

New Phony BT Website Scam

JH2020 — Sun, 03 May 2020 11:29:34 GMT

Hello

I have a Mac and use Firefox. Just this morning this has started happening:

I visit an innocent site (eg, Delia Smith Recipes). It is suddenly hijacked and a page looking to come from BT says I have won a prize. I don't!

Has anyone else had this? What to do about it, etc? Here is the URL (NOTE--DON'T CLICK unless you know what you are doing!:

I also have screen grab but don't know how to post it.

Generally, help!

Thanks

Re: New Phony BT Website Scam

Carlusha — Sun, 03 May 2020 11:30:40 GMT

The net is full of surprises and not all as delicious as Delia's recipes. BT's sites are better accessed starting at:

bt.com

For those delicious recipes from Norwich City FC supporting Canary Delia :

https://www.deliaonline.com/recipes

Re: New Phony BT Website Scam

yorkspark — Sun, 03 May 2020 11:44:19 GMT

Unfortunately, macs are no longer impervious from attack and what you have is adware on your computer which is causing your annoying pop-ups.

You need to download malwarebytes and AdwCleaner, which is from malwarebytes and run the scans and it will clean off the offending software.

Also, i would run a scan from your anti-virus software.

Re: New Phony BT Website Scam

Suzanne37 — Sun, 03 May 2020 11:40:15 GMT

I have also received a pop up claiming that I have won a prize. As it was BT questionnaire, I completed and give bank details. What do I do now? I am worried.

Re: New Phony BT Website Scam

yorkspark — Sun, 03 May 2020 11:48:17 GMT

Why would you need to give bank details for a free prize?

I would suggest you urgently contact your bank and cancel the card who's details you have passed to the world, and check online banking for any withdrawels. Don't dawdle, do it NOW

For anyone else, reading, bt have never and will never give away 'free gifts', its a virus scam.

Download malwarebytes and adwclean, and run scans to remove the virus!

Re: New Phony BT Website Scam

Suzanne37 — Sun, 03 May 2020 11:56:09 GMT

Thankyou. Its already taken the money £1.

Re: New Phony BT Website Scam

Carlusha — Sun, 03 May 2020 11:59:05 GMT

@Suzanne37wrote:
I have also received a pop up claiming that I have won a prize. As it was BT questionnaire, I completed and give bank details. What do I do now? I am worried.

You must phone your bank support - they are manned almost 24/7. The fact they have taken £1 is possibly to test your information was genuine. You need to place a stop against whoever took that £1 and do it now!

Re: New Phony BT Website Scam

NeilO — Sun, 03 May 2020 12:00:38 GMT

@Suzanne37 As well as reporting this to your bank immediately I'd recommend you also report it to the police on the Action Fraud website.

Re: New Phony BT Website Scam

Suzanne37 — Sun, 03 May 2020 12:05:17 GMT

Thankyou. Cancelled my card.

Re: New Phony BT Website Scam

Keith_Beddoe — Sun, 03 May 2020 12:07:05 GMT

@Suzanne37 wrote:

Thankyou. Cancelled my card.

Many banks allow you to suspend or cancel cards using their online app.

Re: New Phony BT Website Scam

JH2020 — Sun, 03 May 2020 19:24:51 GMT

Hello Carlusha

Expert though you be, I am afraid I found your reply flippant. What on earth made you think I don't know how to access BT or Delia correctly? I had a problem for which I was was seeking help, of which you supplied none.

Happily it prompted another poster to report giving away her bank details, for which she received excellent advice: contact your bank and cancel that card. So some good came of this.

Re: New Phony BT Website Scam

JH2020 — Sun, 03 May 2020 19:29:01 GMT

Hello yorkspark

Thanks for your helpful advice.

Re: New Phony BT Website Scam

smithjones — Sun, 03 May 2020 19:38:55 GMT

Im guessing some advertising hosting website/cdn or whatever was to blame as this happened to me via one common uk website that I look at everyday. Domains were all .xyz, added them to my router to block, seems to have got fixed quite quickly as I havent seen any alerts again today.

Re: New Phony BT Website Scam

JH2020 — Sun, 03 May 2020 23:23:34 GMT

Thanks for that. Yes, this was .xyz. My next question: how do I tell my router to block? Step-by-step, please!

Re: New Phony BT Website Scam

smithjones — Mon, 04 May 2020 08:34:41 GMT

I use a Draytek 3910, so cant help with standard issue routers.

Re: New Phony BT Website Scam

Carlusha — Mon, 04 May 2020 08:59:09 GMT

@JH2020wrote:
Hello Carlusha
Expert though you be, I am afraid I found your reply flippant. What on earth made you think I don't know how to access BT or Delia correctly? I had a problem for which I was was seeking help, of which you supplied none.
Happily it prompted another poster to report giving away her bank details, for which she received excellent advice: contact your bank and cancel that card. So some good came of this.

Apologies you found my reply to your post to be flippant. My attempt to lighten locked down moods then failed miserably.

Yes, I also provided help to the user providing her bank details.

Glad you found the help you required. Always access BT through, ideally, MyBT.

Stay safe, stay well.

Re: New Phony BT Website Scam

pottyperson — Mon, 04 May 2020 09:26:22 GMT

@Carlusha wrote:

My attempt to lighten locked down moods then failed miserably.

Not entirely, it made me chuckle. Delia's canary alla relegatione is delicious.

Re: New Phony BT Website Scam

Carlusha — Mon, 04 May 2020 09:33:49 GMT

@pottypersonwrote:
@Carlushawrote:
My attempt to lighten locked down moods then failed miserably.
Not entirely, it made me chuckle. Delia's canary alla relegatione is delicious.

Seems that 😂🤣 "canary alla relegatione" 🤣😂 will be the case unless this season is scrapped altogether.

Re: New Phony BT Website Scam

SeanD — Thu, 07 May 2020 07:40:16 GMT

Hi Everyone,

Thanks for posting about this horrible scam, I am sorry but I missed this thread.

Just to confirm that BT Security has noticed an increase in reports of this particular scam ☹️ I created a thread which shows an example of how this pop up will present if you are a BT customer. Unfortunately, this scam is relevant irrespective of which provider you are with so please spread the word with friends and family. You can see an example of this scam here, Beware! Survey popup scam

@Suzanne37 wrote:

I have also received a pop up claiming that I have won a prize. As it was BT questionnaire, I completed and give bank details. What do I do now? I am worried.

I am so sorry to hear that you were affected by this scam, it is very convincing. Unfortunately, scammers are getting more and more sophisticated with their bad intentions. I am glad you have contacted your bank and cancelled your card. It might also be a good idea to run a virus scan on your device, clear your internet cache and cookies and check your browser extensions for anything you don't recognise. Just to be on the safe side.

Cheers

Sean

Re: New Phony BT Website Scam

smithjones — Thu, 07 May 2020 12:22:15 GMT

My Draytek 3910 runs with web content filters for Malware (and other nasty categories) which uses Cyren provider. I also use Sophos Home Premium which is one of the best for Antivirus, Malware, Ransomware etc and neither of those stopped the pop-up (or website change), I dont know if clicking further would have triggered anything because I didnt try it, as I have seen this sort of thing before.

They do appear to all have the .xyz domain as I mentioned before, which can be blocked if you have a decent router with URL filtering.

Its like swimming with sharks!