Home » CenturyLink » Currently Reading:

Gone Phishing: Hackers Target CenturyLink With Authentic Looking Customer Portal Website – Customers Beware

Phillip Dampier February 11, 2010 CenturyLink No Comments

CenturyLink customers should exercise caution in responding to e-mail links to CenturyLink’s online account portal.  Hackers have meticulously duplicated the look and feel of the nation’s fourth largest phone company’s online account website with hopes customers will provide personal information that can be used for identity theft or fraudulent financial activity.

Trend Micro’s TrendLabs group warned readers it noticed the well-done phishing fakes popping up on several websites, preparing to collect information from unsuspecting customers.  Most phishing attacks typically start with unsolicited e-mail purporting to be from CenturyLink, with a convenient link included for customers to click.  Only this e-mail will not direct visitors to CenturyLink, instead diverting customers to the impostor websites that look like the real thing.

Customers can protect themselves from these phishing tricks and traps by following this advice:

  1. If receiving e-mail from a company asking you to follow a link to their website, you are safer typing in the company’s website address yourself, ignoring the link.  Links that look authentic in an e-mail can be anything but when you click on them.  If you intend to share personal information or password to log in to a website, it’s better to start your journey there yourself.
  2. If the site you reach shows an unexpected address in the URL window, that is often a warning sign trouble is brewing.  CenturyLink’s account login screen should display either https://secure.centurylink.net/login.php or https://eam.centurylink.com/eam/login.do.  If it shows a series of numbers or a website address other than centurylink.com or centurylink.net, consider ending your visit and starting over at centurylink.com, typed into your browser yourself.  When in doubt, don’t enter your login information.
  3. A padlock should be visible somewhere in your browser at the CenturyLink login screen.  Most place the padlock at the bottom of the browser screen.  No padlock?  Danger.
  4. Any code errors on the page that show up should also be a point of concern along with spelling and grammatical errors.

In general, using up to date antivirus software and applying security patches regularly will offer some advance warning of a suspicious message.  But nothing beats common sense.

The authentic CenturyLink website. Notice the padlock circled on the right.

The fake version phishing for your personal information. Circled on the left is a warning of code errors on the page. On the right, notice the absence of a padlock icon.




Share

Other stories of interest:

  1. CenturyLink Opposing Broadband Stimulus Applications That Might Overlap Its Person County, NC Limited Service Area
  2. Charter Customers Contend With Poor Customer Service in Washington State
  3. Frontier Website: Cap Language Revised, But Inconsistencies Remain
  4. Bright House Networks & Flagler Beach City Government Open Up “Free Wi-Fi,” As Long As You Are A Cable Customer
  5. Registering for An Account Here

Search This Site:

Contributions:

Recent Comments:

  • David: Daniel, That is what I set up via my bionic droid smartphone. A WAP2 that acts as the hotspot for my computer. Currently running 8 mb/s on download...
  • Matt: If they don't like the broadband options that are available, they can start their own WISP. That is how most WISPs started out anyway!...
  • Scott: and who do consumers turn to to get away from metered low cap and high priced WISP's?...
  • David: Confirmed working on 2/8/2012....
  • Jared: I agree with Fred. After all these years everyone should have broadband at 1 gigabit upload and download. South Caralina will never progress at this...
  • Matt: Fixed wireless providers (WISPs) all over the country have a simple message for AT&T: "Don't worry bro, we got this" Visit the map at www.wisp...
  • Scott: Even with the FCC standard, if 3G cellular service is in the area they could argue it's 3mbit/512kb service constituted broadband coverage, as they li...
  • Scott: Thank you AT&T.. for once a honest quote we can reference in the future against your lobbyist paid for campaigns to stop community owned broadband...
  • Craig Settles: To get an abstract and full copy of the IEDC-sponsored survey report I wrote, go here - http://bit.ly/pyjSDc...
  • Jay: The Feds should override that with the FCC's 768k minimum standard....
  • Duffin: See, I really don't get that. Why isn't everything pretty much backward compatible? It used to be. It used to be that you could use Cupcake-level apps...
  • Tony: Not yet updated for Android 4.0.... driving me insane as well........

Your Account: