Hey just wanted to give everyone a heads up to a possible phishing attempt/attack. Recently I just got an email that represented it was from Avast! and indicated that my subscription was running out on 25 November 2014. Five days prior to that date it indicated that they would automatically bill me for the renewal to the payment method that was on file in my account. The email stated “To review or update your subscription and payment information or to modify your auto-renewal settings,
please login to your secured Avast customer portal using the button below and the following credentials:”. It then provided me with a link to a “customer support portal”, my login user name (which was correct) and my password (which was not my avast! password). Hovering over the link did not reveal an URL that appeared to be a Avast! related URL, but rather the URL of et2.etr.im.ala, and hovering over the “contact customer service” link showed a URL of et2.etr.im.2s9.
Additionally, while my subscription renewal is coming up…it does not end on 25 November…that along with the provided incorrect password, and the wonky URLs made me suspect that it as a phishing attempt using Avast! as the “Trojan Horse”. The worrying thing is they did get my username and the fact that I’m a Avast! customer correct.
Thanks I looked all over but couldn’t find any way to report it to them. I was kind of getting frustrated and was going to joke in the OP that my first clue should have been the “customer service portal”…Avast! tech support…sure…customer support…not so much.
That email is coming from Nexway, an official distributor of us.
pieman99, I’ve checked your account and it is due to renew on 20 November, through Nexway
Why it has a different password? Because the Order portals are managed by each distributor while the Avast account is managed by us. Hence, they are different accounts on different systems.
That’s because the correct link is a1a instead of ala
