July 26, 2017, 07:42:08 PM
Welcome, Guest. Please login or register.

Support THS!! Buy a t-shirt at the top-hat-sec store! http://www.top-hat-sec.com/store/p23/T-Shirts.html

Author Topic: An exciting email to start the week off with..  (Read 369 times)

Offline TAPE

  • Top Hat Member Moderator
  • Elite
  • ********
  • Posts: 1247
  • Internets: +192/-0
An exciting email to start the week off with..
« on: November 22, 2016, 01:39:16 AM »
Got a panicked Dad on the phone who said he was asked to re-enter login details on his iPad for his personal email account, and now saw that he had message advising an unusual sign-in activity.


I am listed as secondary email (as I am sure most of you are, I am the designated computer / interwebz go-to guy for my family..)
so on opening up my email, I also saw this unsual sign-in activity email.



OK, well he had been travelling, did he have the iPad with him on his trips? No..


Ah, OK, well better check that IP address then to see whether its local or not..





Oh come on.. wtf, U.K. Ministry of Defence?! 
Seemed unlikely that my Dad would be targeted by a government organisation and even more unlikely that they 
would be n00b enough to log in (they really dont need to do that to see the information on our emails..)..


So some online searching later and found this reddit post from last year;


https://www.reddit.com/r/unitedkingdom/comments/3q4emc/can_anyone_help_me_shed_light_on_this_apparently/


It appears that this is probably and internal routing issue and not really the UK Government preparing to send in an S.A.S. Search and Destroy team.. I hope .. lol


And of course it goes without saying that login credentials were changed..


Apparently this sometimes also happens with the U.S. DoD.. so thought maybe interesting to share with you folks over in the good 'ol U.S. of A.
Take all the advice you like and then tell everyone to **** off and do your own thing -- Gitsnik