Egg offers - security risk

malc_b

Bankers! We are constant warned by the banks to be careful of phishing emails, but what did I get the other day from Egg? An email with a free draw every time I used my Egg card. I just had to click the link below and login in on the page.

In other words this was exactly like a spam email.

There was a an alternate method given. Login as normal and click the register link on the right. Except the register link wasn't there. I even contacted Egg to check this was a genuine email. I had checked the plain URLs and it looked ok, but the lack of register link when I had logged in normally was a worry. Egg confirmed that it was.

All told it seems pretty stupid to me for Egg to even send out emails with "click here and login" links. It just accustoms users to breaking security principles. Plus a hacker could get this Egg email, doctor it to change the click here link, and resend it out. Egg would even then tell customers it was genuine!

The stupidity of it all just astounds me :eek:

Scrounger

My thoughts exactly when I received the email.

I haven't registered for the draw (yet), would prefer to do it from the Egg site.

Scrounger

malc_b

Mozette wrote: »

I've got both egg cards and haven't had this email. Are you sure it is from egg?

Yes, I logged into my egg account as normal and send a secure message questioning this. Egg confirmed it was genuine.

Stevena

I would prefer to this through egg sit.