dw1
N/A

Is this a phishing attempt or a legitimate email?

I got a copyright violation notice from Spectrum that I find suspicious for several reasons:

 

1) In the email title, Spectrum is misspelled as Specturm

2) There's a placeholder where my account number should be.

3) I'm very certain that nobody has been downloading anything illegal under my account.

 

Here's the text of the email -- is this a legitimate email? If it is, I'd suggest fixing the errors that make it look like a phishing attempt (misspelled company name in the title, broken account number placeholder.)
-----------

IMPORTANT NOTICE FROM SPECTURM

 

Account Number:  #{Account Number}#

 

Dear Internet Customer;

 

It has been brought to our attention that your Internet service was recently used to improperly copy or share copyrighted content such as music, movies, video or software using Peer-to-Peer or Torrenting software.

 

As an Internet Service Provider, Charter Communications, doing business as Spectrum, is obligated to comply with copyright laws, as expressly stated in our Acceptable Use Policy (AUP): help.twcable.com/twc_misp_aup.html. By using Spectrum’s services, you agreed to this AUP. It is possible that this activity has occurred without your permission or knowledge by a minor who may not fully understand copyright laws, by an unauthorized user, or even as a result of a computer virus. We encourage you to install security software that prevents viruses. As an Internet customer, security software is included free of charge with your Internet service. To download security software on your computer, visit timewarnercable.com/en/support/internet/step-by-step/mcafee-antivirus-and-family-protection.html.

 

Please take immediate action to stop this unauthorized activity. Repeated violation of Spectrum’s AUP may result in remedial action, up to and including suspension of your Internet service.

 

If you believe that the notices you have received are mistaken, or that the activities that are complained of are not copyright violations, you may submit a counter-notification. To submit a counter-notification, please email SecurityCR@charter.com or call the number below and talk to a Security Specialist.

 

We have not shared any information about you with the content owner, nor will we unless we receive a subpoena or are otherwise required to do so by law or if you choose to file a counter-notification.

 

You can learn more about this alert and copyright violation by calling 1-855-222-7342, Sunday –Saturday, 6AM – 11PM MT.

 

Sincerely,
Charter Communications
Customer Security Operations Center
The contents of this e-mail message and
any attachments are intended solely for the
addressee(s) and may contain confidential
and/or legally privileged information. If you
are not the intended recipient of this message
or if this message has been addressed to you
in error, please immediately alert the sender
by reply e-mail and then delete this message
and any attachments. If you are not the
intended recipient, you are notified that
any use, dissemination, distribution, copying,
or storage of this message or any attachment
is strictly prohibited.

16 REPLIES

Is this email supposedly from Time Warner a scam?

received this morning:

 

Dear Time Warner Cable Customer,

Please be aware that Time Warner Cable has detected signs of botnet traffic being transmitted from a device connected to the cable modem on your Time Warner Cable Internet connection.

Have you noticed any suspicious email account activity, unusual error messages, or unfamiliar browsers? Your computer may be infected by a "bot," malicious software that secretly uses your computer to send spam, host phishing sites, and steal your personal information.

Time Warner Cable is using botnet detection technology and is notifying customers whose computers are found to be communicating servers controlled by criminals.

We recommend that you take steps to clean and secure both your computer(s)and your wireless device(s) to prevent your devices being used by malicious third parties without your knowledge. Please note that this computer may not be the infected device if you have other computers on your home network.

Please visit our self-help Web site https://help.twcable.com/BSMS/BotHelpSMS.html once you have read this notice for a suggested course of action, or, should you have further questions, you may call us at 1-855-222-7342.

Thank you for assisting Time Warner Cable Security.

Lead Moderator

Re: Is this email supposedly from Time Warner a scam?

This is not a scam email.

 

This is a notification that your connection has shown signs of botnet traffic.

 

Please do take steps to clean and secure the devices on your network. 

 

If you have any questions please do call  1-855-222-7342 for assistance.

 

Thank you for participating in the Forums.
Have a good rest of the day!


Regards,
Julia R.
TWC-Social Media Customer Care
Moderator - TWC Community Forums

Newcomer

Re: Is this email supposedly from Time Warner a scam?

I too received this message.

 

I would like to point out that this looks 100% fake when I recieved it. It isn't sent from https, the number when searched for does not bring up anything remotely about time warner, the domain also does not bring up anything about time warner. I almost deleted it without giving it a second thought, but then decided to call the normal Time Warner number and they directed me to the same phone number from the message. So it actually is real...

 

I write this as a plea for Time Warner up update this email communication...I imagine many people ignore it as fake.

 

Newcomer

Re: Is this email supposedly from Time Warner a scam?

I received this email today as well and honestly all sites I go to are trusted for instance I use it for school (school site), for ESPN, and a few news outlets and my wife uses hers for work not ever going to any untrusted sites. We never click on hyperlinks in emails or anything like that with out validating them first and so it is my thought that this is a phishing attempt... my question for time warner is the website for self-help in the email  has twcable as the domain name why is it that I can only find timewarnercable in virtually all domain names but yet you feel that customers should trust this email.  

Newcomer

Re: Is this email supposedly from Time Warner a scam?

We just got this message this morning and it completely looks like a scam.  I would also like it if instead of just directing us to a link you put ideas for how to fix in the email.

Established Sharer

Re: Is this a phishing attempt or a legitimate email?


dw1 wrote:

I got a copyright violation notice from Spectrum that I find suspicious for several reasons:

 

1) In the email title, Spectrum is misspelled as Specturm

2) There's a placeholder where my account number should be.

3) I'm very certain that nobody has been downloading anything illegal under my account.

 

Here's the text of the email -- is this a legitimate email? If it is, I'd suggest fixing the errors that make it look like a phishing attempt (misspelled company name in the title, broken account number placeholder.)
-----------

IMPORTANT NOTICE FROM SPECTURM

 

Account Number:  #{Account Number}#

 

Dear Internet Customer;

 

It has been brought to our attention that your Internet service was recently used to improperly copy or share copyrighted content such as music, movies, video or software using Peer-to-Peer or Torrenting software.

 

As an Internet Service Provider, Charter Communications, doing business as Spectrum, is obligated to comply with copyright laws, as expressly stated in our Acceptable Use Policy (AUP): help.twcable.com/twc_misp_aup.html. By using Spectrum’s services, you agreed to this AUP. It is possible that this activity has occurred without your permission or knowledge by a minor who may not fully understand copyright laws, by an unauthorized user, or even as a result of a computer virus. We encourage you to install security software that prevents viruses. As an Internet customer, security software is included free of charge with your Internet service. To download security software on your computer, visit timewarnercable.com/en/support/internet/step-by-step/mcafee-antivirus-and-family-protection.html.

 

Please take immediate action to stop this unauthorized activity. Repeated violation of Spectrum’s AUP may result in remedial action, up to and including suspension of your Internet service.

 

If you believe that the notices you have received are mistaken, or that the activities that are complained of are not copyright violations, you may submit a counter-notification. To submit a counter-notification, please email SecurityCR@charter.com or call the number below and talk to a Security Specialist.

 

We have not shared any information about you with the content owner, nor will we unless we receive a subpoena or are otherwise required to do so by law or if you choose to file a counter-notification.

 

You can learn more about this alert and copyright violation by calling 1-855-222-7342, Sunday –Saturday, 6AM – 11PM MT.

 

Sincerely,
Charter Communications
Customer Security Operations Center
The contents of this e-mail message and
any attachments are intended solely for the
addressee(s) and may contain confidential
and/or legally privileged information. If you
are not the intended recipient of this message
or if this message has been addressed to you
in error, please immediately alert the sender
by reply e-mail and then delete this message
and any attachments. If you are not the
intended recipient, you are notified that
any use, dissemination, distribution, copying,
or storage of this message or any attachment
is strictly prohibited.


Check the email headers.  How this is accomplished depends on your email client.  The "FROM" address may have been spoofed.

 

If a copyright holder filed a complaint against you, they'd have specified the content which was being shared.

 

Smells phishy to me...  Not enough detail to take it seriously..

Trusted Helper

Re: Is this a phishing attempt or a legitimate email?


dstoffa wrote:

dw1 wrote:

I got a copyright violation notice from Spectrum that I find suspicious for several reasons:

 

1) In the email title, Spectrum is misspelled as Specturm

2) There's a placeholder where my account number should be.

3) I'm very certain that nobody has been downloading anything illegal under my account.

 

Here's the text of the email -- is this a legitimate email? If it is, I'd suggest fixing the errors that make it look like a phishing attempt (misspelled company name in the title, broken account number placeholder.)
-----------

IMPORTANT NOTICE FROM SPECTURM

 

Account Number:  #{Account Number}#

 

Dear Internet Customer;

 

It has been brought to our attention that your Internet service was recently used to improperly copy or share copyrighted content such as music, movies, video or software using Peer-to-Peer or Torrenting software.

 

As an Internet Service Provider, Charter Communications, doing business as Spectrum, is obligated to comply with copyright laws, as expressly stated in our Acceptable Use Policy (AUP): help.twcable.com/twc_misp_aup.html. By using Spectrum’s services, you agreed to this AUP. It is possible that this activity has occurred without your permission or knowledge by a minor who may not fully understand copyright laws, by an unauthorized user, or even as a result of a computer virus. We encourage you to install security software that prevents viruses. As an Internet customer, security software is included free of charge with your Internet service. To download security software on your computer, visit timewarnercable.com/en/support/internet/step-by-step/mcafee-antivirus-and-family-protection.html.

 

Please take immediate action to stop this unauthorized activity. Repeated violation of Spectrum’s AUP may result in remedial action, up to and including suspension of your Internet service.

 

If you believe that the notices you have received are mistaken, or that the activities that are complained of are not copyright violations, you may submit a counter-notification. To submit a counter-notification, please email SecurityCR@charter.com or call the number below and talk to a Security Specialist.

 

We have not shared any information about you with the content owner, nor will we unless we receive a subpoena or are otherwise required to do so by law or if you choose to file a counter-notification.

 

You can learn more about this alert and copyright violation by calling 1-855-222-7342, Sunday –Saturday, 6AM – 11PM MT.

 

Sincerely,
Charter Communications
Customer Security Operations Center
The contents of this e-mail message and
any attachments are intended solely for the
addressee(s) and may contain confidential
and/or legally privileged information. If you
are not the intended recipient of this message
or if this message has been addressed to you
in error, please immediately alert the sender
by reply e-mail and then delete this message
and any attachments. If you are not the
intended recipient, you are notified that
any use, dissemination, distribution, copying,
or storage of this message or any attachment
is strictly prohibited.


Check the email headers.  How this is accomplished depends on your email client.  The "FROM" address may have been spoofed.

 

If a copyright holder filed a complaint against you, they'd have specified the content which was being shared.

 

Smells phishy to me...  Not enough detail to take it seriously..


Greetings,

 

I would make the message as Spam and than put it in your Spam folder.  This removes the message from your Inbox and also reports the message to your email provider to help improve its Spam Guard.  Don't download anything from that email link.  Don't call any Spectrum numbers on that email.  Report it as Spam and you can move onward.

 

Satch

dw1
N/A

Re: Is this a phishing attempt or a legitimate email?

Thank you both for your help, dstoff and Satch!  I'll ignore it.

 

I looked at the email headers, and Gmail seems to think it came from Charter, showing that the SPF records match, but I'm a little hazy on the details of how the headers work, and the email was sent both to my Gmail address and my twc.com address (same username in both -- I've never used the twc.com address but I think it forwards to my gmail address) so I'm not clear on whether Gmail is showing that it came from Charter because it was forwarded from my twc.com address or because the actual email originated there.

 

Re: Is this email supposedly from Time Warner a scam?

I reviewed the same type of message stating that someone had been streaming or downloading something from a torrent. Know if this is being done it is being done without my knowledge or approval however what is more concerning is the fact that your company seems to be monitoring internet usage and what it is being used for. I find this as a violation of privacy. What else is it that your company monitors for and why is it that you feel the need to monitor it?