"Requested united.com information"
#1
Original Poster




Join Date: Aug 2007
Location: Truth or Consequences, NM
Programs: HH Diamond, Hyatt Globalist, Marriott Lifetime Platinum,Mobile Passport Unobtanium
Posts: 6,239
"Requested united.com information"
Twice in the last week I have received emails from UA with the subject line above. In each of the emails, UA says I've requested a new password and sends me a temporary password to access my MP account so that I can change my password.
Problem is, I haven't requested a new password. I've been careful not to click on any embedded links in the email (to avoid a potential phishing scam)....I've just logged onto united.com and the temporary password does work. Anyone else have this happen?
Problem is, I haven't requested a new password. I've been careful not to click on any embedded links in the email (to avoid a potential phishing scam)....I've just logged onto united.com and the temporary password does work. Anyone else have this happen?
#2

Join Date: May 2007
Location: IAD
Programs: UA/MAR
Posts: 724
Someone is using the "forgot password" link with your MP number or email address.
It could be someone making a simple typo in the MP number, or a attempt by a very junior hacker to get your information.
Either way, it's nothing to worry about, as long as nobody except you has access to your email.
It could be someone making a simple typo in the MP number, or a attempt by a very junior hacker to get your information.
Either way, it's nothing to worry about, as long as nobody except you has access to your email.
#4


Join Date: Feb 2005
Location: DEN, or so it says...
Programs: UA1K/RCC, Avis CHM, NWA Plat, SPG Plat
Posts: 2,997
Are you sure the emails are coming from United?
Take a look at the header of the email and see where it is originating from. Or hit reply and see what domain it's coming from.
Take a look at the header of the email and see where it is originating from. Or hit reply and see what domain it's coming from.
#6
FlyerTalk Evangelist




Join Date: Dec 2004
Location: MSP
Programs: Fallen Plats, ex-WN CP, DYKWIW; still PAL Premier Elite & Hilton Diamond
Posts: 25,429
The domain is easily spoofed. And if its phishing, it probably originates from a compromised computer in a botnet.
#7
A FlyerTalk Posting Legend




Join Date: Apr 2004
Location: GVA (Greater Vancouver Area)
Programs: D.R.E.A.D. Gold card holder
Posts: 53,219

