[HH#741454] Re: Stay Vigilant

[HelioHost]

Username: gaffoon, Server: Johnny, Main domain: gaffoon.helioho.st

Those are good tips. I did get a "phishing" letter yesterday at the e-mail address I use for Heliohost, and I reported it to my e-mail provider as "phishing." I can send you copy if you want to inspect the "headers."
Jerry


HelioHost wrote:
> Stay Vigilant
>
> Hey Jerry,
>
> We have recently received a few reports that someone has launched
> a phishing campaign to try to steal free HelioHost accounts.
> We're sending out this warning email to remind you not to click
> any strange links in any strange emails claiming to be from us.
>
> A few things to keep in mind:
>
> * If you contact support, 99.9% of the time you don't need to
> post your email address. The reason we require a username during
> signup is so you can contact support without disclosing any
> private information, such as your email address.
> * We don't send emails from noreply.heliohost@gmail.com or from
> any other email services like outlook.com or yahoo.com. All of
> our emails will come from @heliohost.org, or if it's from our
> support forum, it will come from @helionet.org.
> * We don't use a free Ngrok app to host our login page on some
> kid's laptop in Italy. Report these links to us or directly to
> abuse@ngrok.com to get it taken down quickly.
> * We don't use AI to write strange emails to you threatening to
> suspend you for sending spam or any other reason. All of our
> emails are written by humans.
> * We won't pressure you to act fast to click some link before we
> delete your data. That false sense of urgency is a common
> phishing tactic.
> * Free signups are currently closed while we rebuild Johnny, but
> they will open again soon. There is no need to steal someone
> else's free account when you can just wait a week or two and then
> signup for your own account.
>
> It honestly doesn't make any sense to launch a phishing campaign
> against a charity to try to steal free accounts from people who
> are too poor to afford hosting, but I guess it's just more proof
> that most criminals are very very dumb, and since they're very
> very dumb, they resort to crime instead of legitimate activities.
> As obvious and sad as this phishing attempt is, if you're not
> paying enough attention or half asleep, it's possible you might
> accidentally fall for it.
>
> Don't click any weird links! Don't try to login to any weird
> phishing pages! Stay vigilant out there, people!
>
>
> https://helionet.org/index/forum/45-customer-service/?do=add
>
> Regards,
> HelioHost Staff
>
> https://heliohost.org/
> https://helionet.org/
>

[Krydos]

Thanks for reporting the email as phishing. Since it came from gmail.com they should be able to suspend the account pretty quickly so it can't send any more phishing emails.