BEV Logo

E-mail Borne Attacks

Warning

We have received numerous reports of spoofed e-mail with subjects like "Account Alert" or "Your profile will be locked", claiming to come from "admin@bev.net", "BEV Security Department" or "Administration bev.net" and containing executable malware, or a link to executable malware. Please do not open this email or click on the enclosed link.

BEV will not ask for account information via email.

Email from BEV: Is it legitimate or is it a trojan horse or phishing scam?

Meet the bad guys: Lots of people you don't know want to install malicious software on your computer or steal private information from your computer. To do this, they hope to trick you with deceptive email. These attack emails may try to deceive you by claiming to be from BEV staff members, and they may be hiding a link to the attacker's website in an HTML attachment that makes it look like the link you are requesting is on a BEV website.

So, how can you tell if the mail came from the BEV or the bad guys?

 

 

  1. If it's an HTML attachment, BEV did not send it. BEV Staff may occasionally send out legitimate emails to you containing web page URLs. When we do, any URLs in the message will be delivered in text form. You will need to copy the URL from our email and paste it into your web browser Address or Location field, unless your email client automatically turns URLs in plain text messages into clickable links.
  2. If BEV didn't "site" it, BEV didn't send it. Any widespread announcement concerning BEV services will always be available directly from the BEV website. If you receive an email that appears to be from BEV with a notice of this sort, go to the BEV Homepage (http://www.bev.net/) and look for a confirming announcement.

    Note: We have the same problem when we get email "supposedly" from you. So, to separate you from the SPAM, certain BEV email addresses respond to email with a request that you use our Staff Mail Form located at http://www.bev.net/contact. (Caution: Remember #1 above.)

     

  3. If the URL doesn't begin with a "bev.net" server name, you're not typing to us. When filling in web forms, guard against the possibility of revealing information to an attacker by looking carefully at the link in the Address or Location bar at the top of your browser window. BEV websites will always end with "bev.net", as in "http://www.bev.net/" and "https://secure.bev.net/". The slash after "bev.net" must be the first one to occur after the "http://" or "https://" that starts the URL.

For more information on email phishing and other attacks, see the following links: