Nationwide sending me infected emails

arciere

The_Fat_Controller said:

@Deleted_User

My NW emails come to an AOL address and that address has never been identified as unsafe.

It's not the address in itself that is unsafe, it's the fact that the address has been spoofed.

[Deleted User]

arciere said:

I mean, what does the email actually say? Can you read the content? If it asks you to open the attached file, then you've got your answer, regardless of where the email was sent from.

No - I cannot read the contents - only the virus alert - and there's NO post code in the header either !

Unbelievably - it doesn't appear in Webmail - it must have been filtered out

I am guessing that it must have been infected !

pbartlett

"it comes from nationwide@nationwide-communications.co.uk"

just because it SAYS it come from nationwide@nationwide-communications.co.uk doesn't mean it DID come from nationwide@nationwide-communications.co.uk

CoastingHatbox

I gave you the FQDNs and IPs of the email servers sending Nationwide email.
Do those same FQDNs and email servers appear in the headers of the emails you are receiving?

It is not unknow for ClamAV to give false positives for `Heuristics.Phishing.Email.SpoofedDomain`.

If TalkTalk is your email provider, I would raise a case with them. They can investigate and see exactly what is happening.