Got an email about account password being changed?

  • 1
  • Question
  • Updated 2 years ago
  • In Progress
So I got an email saying my password for my exede account (where I check data, pay bill, etc.) was changed but I never changed it. I thought the email was related to recent changes that I made to my plan (just upgraded to unlimited gold 30, installer is coming next week). So I immediately tried to log into my account, but I was getting an error from salesforce (which I assume exede uses to handles payments and stuff). I forgot to write it down but it finally let me in, using the old password. So it appears my password was never actually changed?

Has anyone else got a message like this in the last 24 hours as I'm wondering if this may be a false alarm or issue on salesforce's end?

To be on the safe side, I immediately changed my password. Should I still call exede like it says in the email, would there be any point to doing so since I was able to log in and change the password? If someone did access to my account it appears they would be able to get my name, address, and last 4 digits of my CC but not much else. Would Exede be able to tell me if someone with an usual IP or something did access my account?
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes

Posted 2 years ago

  • 1
Photo of Bev

Bev, Champion

  • 3287 Posts
  • 1463 Reply Likes
That's a scam or phishing email. Forward it to Viasatlistens@viasat.com and tell them you got a suspicious email. They will do what they can to stop others form getting it.

You did right by changing your password immediately. Never click on links in suspicious email and if, you are still concerned, call 855-463-9333 and speak with Viasat Support.

Big red flag is that it if it still says Exede - Exede is no more, it's all Viasat now.
Photo of Matt B

Matt B, Viasat Employee

  • 1019 Posts
  • 502 Reply Likes
This.  
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
I don't think it is a scam email though, it list the same number you have given me and the I checked it's from a @Viasat.com email address and I checked the email headers and the return path is @bounce.customercare.wildblue.net

Yea it's viasat, I just said exede because of old habits...
(Edited)
Photo of Bev

Bev, Champion

  • 3287 Posts
  • 1463 Reply Likes
Nope, if it were form Viasat it would be from an @Viasat.com address. Wildblue,net is an OLD customer address and, very well could be a hacked email account.
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
Well it is a @Viasat.com email address. The other part was what I found in the raw output. I also checked old emails I've gotten from Viasat which use the same address and also include the same return path, so I'm fairly certain it's not a scam email. 

It's not a big deal though. I was just wondering if anyone else had got a similar email lately, I'm also fairly certain it was some kind of false report because the password hadn't actually changed.

Thanks for the help.
(Edited)
Photo of Bev

Bev, Champion

  • 3287 Posts
  • 1463 Reply Likes
No bounce.customercare.wildblue.net IS NOT @Viasat.com you need to forward that email to Viasatlistens@viasat.com, i'ts a phishing email and needs to be stopped before someone gets taken by it.
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
Again this is the raw output, the email is from @Viasat.com. I got a email a few weeks back that my automatic payment failed due to an issue I had with bank. Only Viasat would know or have any knowledge of my payment failing which it did. I checked this email and against that email and it had the same raw output and address. 

I don't think you are understanding what I mean by raw output: https://whatismyipaddress.com/email-header

The From Is: @Viasat.com
The Return Path Is: @bounce.customercare.wildblue.net
(Edited)
Photo of Bev

Bev, Champion

  • 3287 Posts
  • 1463 Reply Likes
From can easily be spoofed and who at Viasat.com? that return is not official.
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
That is why you look at the raw output / email headers. You can spoof a display name but looking at the headers / raw output can easily allow one to spot a fake email.

I also checked emails from Exede I got over 2 years ago. They also include the @bounce.customercare.wildblue.net return path via raw output. 

I also compared the IP address to the email I got about my failed payment. Both were the same.

https://www.howtogeek.com/121532/htg-explains-how-scammers-forge-email-addresses-and-how-you-can-tel...

EDIT: IP address traces back to ExactTarget, Inc. which is salesforce, which is automation and analytics software and is what Viasat is using. 
(Edited)
Photo of Jim16

Jim16

  • 2453 Posts
  • 2183 Reply Likes
Billy, Matt B just told you to treat it as a scam.  Matt B is Corporate big wig thingy guy.
But do what you want.
Photo of Jim16

Jim16

  • 2453 Posts
  • 2183 Reply Likes
Billy, Matt B just told you to treat it as a scam.  Matt B is Corporate big wig thingy guy.
But do what you want.
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
Matt B had a very limited amount of info, based on my original post. If he responds again with still wanting me to report it I have no problem doing so, but one of the first things I did was to confirm it was a real email, which I am certain it is. Not my first time dealing with fake emails.

My main concern was there could be some kind of issue that caused false reports to be sent out about password changes (has happen before to other companies). 

I also had the Viasat rep update some outdated account info yesterday when I upgraded to Viasat 2, maybe that triggered the email. Not sure.

Anyway, password has been changed and if someone did access my account there isn't much that can be done about it so it really doesn't matter at this point. Again thanks for the help. 
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
Matt B had a very limited amount of info, based on my original post. If he responds again with still wanting me to report it I have no problem doing so, but one of the first things I did was to confirm it was a real email, which I am certain it is. Not my first time dealing with fake emails.

My main concern was there could be some kind of issue that caused false reports to be sent out about password changes (has happen before to other companies). 

I also had the Viasat rep update some outdated account info yesterday when I upgraded to Viasat 2, maybe that triggered the email. Not sure.

Anyway, password has been changed and if someone did access my account there isn't much that can be done about it so it really doesn't matter at this point. Again thanks for the help. 
Photo of Jim16

Jim16

  • 2453 Posts
  • 2183 Reply Likes
You told everyone they were wrong, so not sure why you are thanking people for the help.  If you came here knowing it was real and then told everyone they were wrong, what did you accomplish?
Photo of Jim16

Jim16

  • 2453 Posts
  • 2183 Reply Likes
You told everyone they were wrong, so not sure why you are thanking people for the help.  If you came here knowing it was real and then told everyone they were wrong, what did you accomplish?
Photo of Jim16

Jim16

  • 2453 Posts
  • 2183 Reply Likes
( The only thing accomplished by this post was a lot of double posts!)
Photo of Ivan Bludnik

Ivan Bludnik

  • 89 Posts
  • 110 Reply Likes
And what did YOU accomplish by criticizing him?
And what did YOU accomplish by criticizing him?
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
@Jim16

Just to clarify, I never posted to debate about if the email was a scam or phishing email. I never had any doubts the email was real, since I had already verified the email. And besides that how many scam emails have you gotten only asking you to do one thing, call this number... the same number we already determined belongs to Viasat and is the same number Bev posted? I mean really if it was a scam or phishing email they would be asking me to log in someplace or call a non viasat number to get info from me. Come on now.

Again what I hoped to determine with this post was, as I said in my original post:

1. See if there could be some kind of issue that caused false reports to be sent out about password changes. 

2. See if calling Viasat would offer anything productive since I was already able to get into the account and change said password. I didn't want to waste my time or Viasat's on "yea we can see someone got into your account but that's all we can provide", etc.

 I said thank you to be polite and because I do appreciate any help one provides, even if it isn't exactly what I was looking for. I'm not here to argue over it though, so again I say thank you and leave it at that.
Photo of Billy

Billy

  • 34 Posts
  • 0 Reply Likes
@Jim16

Just to clarify, I never posted to debate about if the email was a scam or phishing email. I never had any doubts the email was real, since I had already verified the email. And besides that how many scam emails have you gotten only asking you to do one thing, call this number... the same number we already determined belongs to Viasat and is the same number Bev posted? I mean really if it was a scam or phishing email they would be asking me to log in someplace or call a non viasat number to get info from me. Come on now.

Again what I hoped to determine with this post was, as I said in my original post:

1. See if there could be some kind of issue that caused false reports to be sent out about password changes. 

2. See if calling Viasat would offer anything productive since I was already able to get into the account and change said password. I didn't want to waste my time or Viasat's on "yea we can see someone got into your account but that's all we can provide", etc.

 I said thank you to be polite and because I do appreciate any help one provides, even if it isn't exactly what I was looking for. I'm not here to argue over it though, so again I say thank you and leave it at that.
Photo of Matt B

Matt B, Viasat Employee

  • 1019 Posts
  • 502 Reply Likes
Matt B is Corporate big wig thingy guy
They are called toupees, and I'm very sensitive of them.  :-D



Billy,  basically, if it's even a little bit fishy, treat it like it's bad.  If you're not sure if the password has changed, try to log in!  Call Customer Care to confirm and change your password to be sure, or do it yourself!

If you do get more suspicious emails, copy the entire contents, and send it to us at ViasatListens@viasat.com.  We can generally tell at a glance, as we work closely with the team that builds all customer communications.  If it's a phishing email, we'll send it on to our cyber security team (fantastic title) and they will take care of it.