Spam email RE R7000 Firmware?

Luminary

Jun 23, 2017

Thank you for your excellent detection work! Indeed I also had my doubts about the origins of the mail that was sent. But an employee of Netgear ElaineM, assured us that it was in fact a Netgear sent (spam) mail. I use the word spam here because after all this is such a piece of unnecessary mail that it defines as such. It does not inform the users, it is not compiled like a 'remember to' or 'be sure to check the download section from time to time' mail. Instead it makes the user believe that it is absolute essential to update now and straight away. While there is no reason to do so right now because a of new infection that will take over all that is digital.

But I don't understand why:

1) The sender is not Netgear but another address

2) The mail talks about security but has CLICKABLE LINKS ....... (did someone at Netgear ever read about security...???)

It is so weird that the mail is not really netgear that it is striking!

Just recently a scam was discovered where senders would use Cyrillic, Chinese, Thai or other Characters that most western users do not have on their computer. Those characters were then transformed into western letters by the software on the users computer. In a browser like Firefox these look like legitimate addresses. So when you click on them you would end up a a site that looked legitimate but was infact a complete different address written in another language. However in the addressfield you could not see that!

So I never trust mails sent out by a company when it has a clickable link. But apparently at Netgear they don't take your security serious. And from your e-mail I fear that our e-mail addresses are in the hands of some marketing companies, thanks to Netgear.

Forum Discussion