Be Aware of a Legitimate Looking Cogeco Phishing Attack Currently Targeting Subscribers

Today, I received a very convincing looking email which included my name and email address.  It was actually a phishing attack designed to steal the password to my Cogeco email account.

The message appeared to be from Cogeco.  It informed me that the password for my email account had been recently changed, and if I had done it myself, I could ignore the warning.  Included in the email was a link to use in case the change had not been made by me.  Of course, many users who see this will react immediately, because they most likely did not make a change and are afraid their account has been compromised.

Clicking on the link will present you with a perfect looking (but illegitimate) copy of the Cogeco My Account login page.  And if you enter your email address and password, that information will be immediately sent to criminals, giving them the ability to take over your email account.

What to do if you were tricked:

If you received this message, clicked the link, and entered your login credentials, contact Cogeco IMMEDIATELY BY PHONE to report the situation. You should also attempt to login to Cogeco’s website directly from your browser (not from an email link) and log into your email account from the Cogeco site.  Because it is security best practice not to click on links included in emails or suspicious messages, I will not include the Cogeco login link in this message. Once you have directly logged in to Cogeco’s email server, I suggest you change your email password.  Also, if you have used that same password with any other online accounts associated with your email address, head over to those sites and change your password there as well.

When you change your Cogeco email password, you will need to reconfigure email programs on your computer, phone, tablet or other device. If you have difficulty reconfiguring your email programs, call your regular computer service person, or you can give me a call.

Jack Eisenberg is the owner of Safe and Secure Computing and regularly monitors cyber security developments such as this one.