TalkTalk website hit by cyber-attack

50Twuncle

ajay46 wrote: »

I want to leave TT but was told today that my contract is for 24months!

I have to wait till it ends or pay about £200 to cancel!

Its bad that they get attacked and customers wanting out have no options if locked into contracts.
What if I change my bank account can they still pursue me legally?

Unfortunately - yes they can trace you if you change banks or even move house !!
You agreed to their T&C when you joined

Raine_E_Day

joe134 wrote: »

unless you have changed your card , what's the problem of giving it again, if they already had it.
I've just renewed my VLR by CC, and a new 18 month contract, on the phone, I may add, not online;.
Everyones getting all worked about something that's already happened.
Calm down dear, it's only an accident.:cool:

No, it's not an accident, it's incompetence by Talktalk. You may put your trust in TT, but I do not. The site is still not fully functional.

I do have new cards, both credit and debit and have no intention supplying them with these new details. I had been using both methods for early payment. I have also decided against paying the VLR which is due, as the saving is nothing like it used to be. Neither would I want to be tied in to a new contract. I like to have an escape route...

50Twuncle

Don't know whether it is linked or not - but I have been getting lots more spam and phishing emails since the TT hacking was announced...
I got a "NatWest" phishing email - 2 minutes after I made a purchase on my visa card this morning
I do not bank with Nat west and never have - My AV is up to date !!
And on Saturday - I received a phishing email, supposedly from HMRC ("HMC")- minutes after doing an on-line Income Tax transfer with HMRC !!!

adem

Earlier this afternoon I got a call from an office (lots of people speaking in the background) supposedly from Talktalk.
They claimed that they had received a lot of error and warning messages from my router pointing to a long and protracted hacking attempt. They said they could prove that they were from talktalk by reading out my account number. This got my trust a bit.
A female agent then took me through some procedure scanning my computer, which ended with 18500 warning and error messages.
They then got me to go to Teamviewer website and and download their remote access software. From then on my screen went black many times. The female then passed me on to a 'senior' advisor who went on to confirm that I would be getting £200 rebate as a result of all these warnings and error messages.
By the way the accent of these people were overwhelmingly Indian as far as I could make out.
The senior person then said I could get the refund wither by bank transfer or back on to a card. He then got my banks website up and asked me to fill in my details. I became apprehensive so said that I was not happy about this. He then got a Western Union page up and said that I should fill in this page in order to get the refund on my card. I questioned him on why I needed to fill out forms when they were giving the refund. He tried to be persuasive. But in the meantime I used my mobile phone to contact talktalk. they confirmed that there were no such operations going on. Immediately I shut down my laptop in fear it being hijacked.
I then called the action fraud office and gave them the full run down.
Looking back at how the situation unfolded, this was a definite professional and organised at a high level. I could even contemplate a group of ex talktalk Indian employees getting together to form this very convincing act.
Do not allow anyone to gain remote access to your computer, as you might live to regret it.

50Twuncle

adem wrote: »

Earlier this afternoon I got a call from an office (lots of people speaking in the background) supposedly from Talktalk.
They claimed that they had received a lot of error and warning messages from my router pointing to a long and protracted hacking attempt. They said they could prove that they were from talktalk by reading out my account number. This got my trust a bit.
A female agent then took me through some procedure scanning my computer, which ended with 18500 warning and error messages.
They then got me to go to Teamviewer website and and download their remote access software. From then on my screen went black many times. The female then passed me on to a 'senior' advisor who went on to confirm that I would be getting £200 rebate as a result of all these warnings and error messages.
By the way the accent of these people were overwhelmingly Indian as far as I could make out.
The senior person then said I could get the refund wither by bank transfer or back on to a card. He then got my banks website up and asked me to fill in my details. I became apprehensive so said that I was not happy about this. He then got a Western Union page up and said that I should fill in this page in order to get the refund on my card. I questioned him on why I needed to fill out forms when they were giving the refund. He tried to be persuasive. But in the meantime I used my mobile phone to contact talktalk. they confirmed that there were no such operations going on. Immediately I shut down my laptop in fear it being hijacked.
I then called the action fraud office and gave them the full run down.
Looking back at how the situation unfolded, this was a definite professional and organised at a high level. I could even contemplate a group of ex talktalk Indian employees getting together to form this very convincing act.
Do not allow anyone to gain remote access to your computer, as you might live to regret it.

Good write up and goòd advice..

sharpshot

I've had 3 phone calls from India trying to scam me in the last 2 days. I'm annoyed because TalkTalk informed me that none of my details have been stolen when they obviously have my name and phone number. I hope that's all they have. TalkTalk use a phone centre in India, so you can't tell if its them or not until you check the number. I called TalkTalk and confirmed that these are scam numbers and they are aware of it. Shame they haven't let their customers know about this. If you do get a call from TalkTalk, put the phone down and call them on the number on their website, if it hasn't been hacked again Took me a while to find it, I called 0870 444 1820. Here's the two numbers that were calling me, if you dial 1471 and get either of these, you know they aren't from TalkTalk
0017018453392
00611709517837
TalkTalk told me I can't get out of my contract until May but as it looks like they have lied to me about my data not being stolen, I will be leaving them as soon as I can.

2010

I`ve been getting scam calls since TT was hacked.
The latest didn`t leave a number when i 1471.
This is a new tact, they said they were from BT and as BT covers the whole network for everyone including TT they needed to cut off my broadband for 14 days because of a virus attack on my pc.
They then said they could prevent this if I turned on my pc and let them "fix it".

DavidP24

TalkTalk and their victims need to understand what happens with hacked data, it does depend on who stole it, if it is Russian they usually try to monetise it themselves and only when they think they have squeezed every last cent from it do they sell it on or share it.

For others it is all about the Kudos, they share or swap the data on hacking forums and that is what appears to have happened with TalkTalk data, from the feedback we are seeing it is already out there with the "Indian IT repair scam".

For them it is a numbers game they just call with a script, if 0.5% of 4m people are dumb enough to give them access and 1% of those pay the £200+ for the repair that is £40000 plus they earn aff commissions on what they encourage you to buy.

I helped a neighbour this happened to, they were conned into giving access, they immediately installed three legitimate remote access tools so if you cut one off they would use the other to turn it back on again.

They then installed a load of malware and put in 7 trial AV apps that all expired within days or rather said they did because the expiry kept changing to create scarcity.

I was able to show through forensic analysis what they did because they were sloppy (I will not say how as they will up their game).

So the uneducated person would pay them to remove the malware they said they "found" but really they put there and they would recommend they sign up for one of the AV trials they had on their PC.

One chap on radio had a proxy put into his TalkTalk router and says they got his logins for online accounts by using man in the middle exploits. That is being investigated now.

So it all depends who gets the data and what creative way they can think of messing with you, but when someone calls you and has 90% of your banking data, tells you not to trust them by telling them your pin, CV code or the last 4 characters of your card, but asks you to key it in (so they can get it from tone), then you could be fooled.

There is this thing called consequential loss and another called class action.

TalkTalk really can't say that one clients data was not hacked, their data will be in an SQL database, the hackers may have got some of that or all of it, they may have got transaction logs (files that enable the DB to be rebuilt), they really can't say with any certaintly.

There will be some calls that are just looking to add information to what they have, it may be innocent data but when added to what they have enables more credible scams in future.

I can't believe people are being bought off with these paltry offers.

2010 wrote: »

I`ve been getting scam calls since TT was hacked.
The latest didn`t leave a number when i 1471.
This is a new tact, they said they were from BT and as BT covers the whole network for everyone including TT they needed to cut off my broadband for 14 days because of a virus attack on my pc.
They then said they could prevent this if I turned on my pc and let them "fix it".

TalkTalk

Hi All,



We understand everyone's concerns over scam calls and we recommend everyone remains vigilant with regards to unsolicited calls.

If anyone is receiving calls claiming to be from TalkTalk these can be reported to us using the information on our help pages on nuisance calls and scam calls. We investigate all reports of these calls and actively work to block incoming scam calls at a network level. We currently block circa 70million scam call attempts each month.

We offer several calling features free of charge which can be added through My Account to help manage inbound calls including caller display, last caller barring and anonymous caller reject.

[FONT=&quot]If anyone needs any specific help please contact us on our community forums or by tweeting @TalkTalkCare

Thanks
[/FONT]

DavidP24

It is all very well saying that but WHAT are you doing about your various TalkTalk call centres doing underhand things?

We have had various reports on here where it appears commission humgry TalkTalk staff behave badly.

A customer calls up with a problem and rather than solving their problem they make them sign up using a new email and tell them it is all part of the process, then the customer finds they have been entered into an 18m contract without permission.

It is bad enough you allowed yourself to be hacked and that you try to play it down by suggesting only some data was stolen when you have no idea how much was actually stolen. We have people who have reported you ASSURED them they had not had their data stolen and yet they found out they had.

Then you try to fob people off with these paltry rewards which are actually services that renew automatically and have a charge.

The truth is that dealing with TalkTalk has become as dangerous as walking through a minefield, one wrong step and BAM you get hit with a charge.

Your pricing is the same.

Then as if allowing yourself to be hacked was not bad enough you give away data on your 4 million customers every month to an information broker who monetise it.

It seems to me that the whole culture of TalkTalk has changed and as such you have gone from a company I would actively recommend, to one I would actively caution people against.