Weird email from Comodo

[ICIT2LOL]

Have been testing out Comodo Premium (free) and then got an email from a person called Glenn Howard who claimed to be my point of contact for sales re the certificate I supposedly bought - haven't bought anything from them which in hindsight I should realised that something was up and have just dumped the email.

Now I replied to the email that to all intents and purposes was genuine as it had the Comodo logo and the correct email addresses on it. (I am very suspicious re any emails as a rule unless I know 100% that they are ok.) However the return email was very strange as the mail address was comod.com and not comodo.com.

So I have emailed the main Comodo site and have yet to get any reply - now three days in the waiting.

Has anyone else had this happen to them while using Comodo? If so what was the outcome as now I am getting a tad nervous re using Comodo..

 

[FranzB]

I would delete it and all traces, then install it again, watching carefully.
Then see if you'll get the email again.
What gets me is that these things even happen with AV providers. When i google for "glenn howard" comodo
a site (linkedin) comes up saying he is global account manager Comodo with an education in criminal justice! So maybe his identity is stolen. You'd think Comodo would answer your email. Something is screwy.

 

[FranzB]

Curiosity killed the cat ........ but a cat has 9 lives (ask Borg386!) so i couldn't resist.
So i first googled for comod.com then clicked on it. The page is empty/altered with some story about why by Sedo.
I think Comodo and Glenn Howard of Comodo should really look into this.
While i take my dog for a walk i'll have a full scan running on my computer with MSERT (Microsoft Emergency Repair Tool).

 

[ICIT2LOL]

Hum Franz heard back from Glenn Howard today and he seems to be working for Comodo but out of a different division / department because that address was quoted by him again. However he did mention that he was contacted by the main Comodo sales people after I emailed them and he has apologised for any confusion. Plus as you said he states he is the global accounts manager.

I think maybe just maybe I downloaded a Comodo trial version perhaps early on in my "adventures" with them on my own tester instead of Premium free and it has gone through to him. However why they should have a different site for sales is sort of odd don't you think? It would be a bit like Microsoft having a different site for global sales as well as local contact points with differing email addresses??

I might just email back too with that Sedo ref you quoted as you say it makes one wonder (me at least) if Comodo have got their act together / properly.

Have had no trouble with Comodo as such - as have a couple of friends whose computers that I put it on for them. I have told them to get back to me should anything "fishy" come up but as yet nothing. I do try and educate anyone a bit re security when I do their machines and have told them that to not be vigilant is extremely foolish.

Having said that I think I might do what you did and run MSERT next time I am on the tester - thanks for the heads up my friend!!

 

[rubyrubyroo]

Honestly, If it were me I would avoid anything like that. May be legitimate, but even without seeing the specific email I can see a couple red flags from your description alone. I would just check one of their MANY contact numbers (toll-free of course) or email addressed on their CONTACT COMODO page. First you might want to confirm or deny the existence of this "Mr. Howard" and his position/email (and yes it's ok to tell them why you're asking). Hopefully it's nothing, but you can't be to safe these days. Just my suggestion (always go to the source and use an UNASSOCIATED ROUTE - like typing the comodo.com address in yourself, don't trust any link to the site in the associated email for instance) Best of luck!

Mike

 

[ICIT2LOL]

Ok Mike have done and apparently they do know this Glenn Howard - thats direct from the New Jersey sales site. It apparently was typo which I still think is still not the full quid and yes mate I am staying well clear of anything that comes through from that site as one would think that the addresses would be automatically loaded. In other words for a company that size one would expect everything to be down pat.


Ha ha you can imagine if you got mail from the White House and the address was [email protected] wouldn't that give you the creeps!!:roflmao:

Seriously I still do not get why they have to go through a totally separate site for certain sorts of sales doesn't make sense.

 

[rubyrubyroo]

Great! yeah, I've heard of companies like that using separate domains and such for their different products, but they still usually use their main site ...possibly mirrored at each!? weird, but probably some good reason - possibly legal reasons?

And I clicked on the email address and dropped BHO a email. (wasn't pleasant) - so maybe it's his personal acct! !!

also yes you'd think the email app would send his email correctly, unless he enters it manually each time :sarc: but also maybe it's an old acct. and he moved who knows, I just wanted you to error on the side of safety!

Peace,
Mike

 

[ICIT2LOL]

Thanks Mike - had to have laugh when you said he might enter it manually each time too bet the keys are running hot eh?

Still think at the salary he must earn he should get it spot on and in a way it shows up their quality control in sense eh? - perhaps he works alone!

 

[rubyrubyroo]

He may be "That Guy" that they keep, because he's the bosses nephew or something like that, but his office is in a janitor's closet. he could actually be missing a key or two on his commodore 64!

Mike

 

[ICIT2LOL]

He he thats not all he might be missing

 

[FranzB]

It has become even more weird. Going to comod.com now gives you a site in Russian.
Nothing by Sedo any longer.

 

[ICIT2LOL]

Yeah Franz this seems to be getting a touch "complicated" as you can see in the attachment my Kaspersky has picked it up as a grey ref and it quotes hylocomod too. The language looks to me to be Czech or Polish - no correction it's Turkish have just done a Google translate.

I might just get onto the Comodo forum and ask as this thing is bordering on deceptive to the unwary eh?

 

[profdlp]

I've had emails in the past claiming to be from various companies (can't remember which ones) which looked fishy. The pattern was often something along the lines of "click here to upgrade to pro/ultimate/whatever for free". Sometimes it was for software I had never even heard of. On occasion they would even mail me an "invoice" showing the regular price (usually something high, like $89.95) with the Total Due marked "Paid In Full". My guess is that they were expecting people to assume they had made a mistake and then go download something free in a hurry before the company discovered their error. I'd bet that the download was some "free" software you don't really want - like a virus or trojan.

I never clicked any of them and they were all scams. I'm betting some crooks got hold of the name of someone who genuinely works at Comodo and are using it as bait. :sarc:

 

[ICIT2LOL]

Hum reckon you're right too mate as the main office confirmed th existence of that fellow and I don't swallow the explanation that it must have been a typo - I mean a large company like that?? Even I have spellcheck!:sarc:

 

[rubyrubyroo]

Don't remember if i mentioned this, but if I put my "hacker's brain processes" mind in, I would account for the people that are smart enough to try my previously mentioned suggestion, I'd learn the name and email of an ACTUAL REAL WORLD employee/salesman in the company and get a copy of their exact emails, then it's a simple email sender spoof. (even if it would cost the hacker signing up for an account to get this type of info, it would be well worth it for the many times they could scam someone!) Remember they're Evil Geniuses.....everyone seems to focus on the evil part. expect them to be one step ahead.

(alright switching back to "regular brain processes" mind....okay, there!)

Wow look at that thought I just had above!

Mike

 

[FranzB]

Go to the Comodo forum and see what they advise. It's your best bet. I am sure Comodo keeps an eye on that forum, as Microsoft is most likely doing it here. It would be stupid not to.

That linkedin account may be a fake too. Who checks what you put down there as information?
Who checks or would be able to check on this forum whether the info given is right? I could put anything down (that's why i deleted mine). No offence but that's the way it is.

 

[rubyrubyroo]

I guess what I'm getting at, or maybe misunderstanding here is what is the problem exactly? Did you send "sensitive" info to this person or worried about what may have happened during the email exchange I think you did with "him?" Maybe just curiosity?

If there's nothing to worry about as of yet from a security standpoint, simply block the address and purchase the software I assume you plan to purchase by contacting comodo through THEIR website. Or whatever interactions you intend on having, initiate the communication yourself.

Yes it would be the "right thing to do" to drop a message and/or forum post referencing this potential problem to the company. Then they can do with it as they do in their own way, (can't MAKE them act noble I suppose.)

Mike ??

 

[FranzB]

........................
......................................
......................

Mike ??

Yeah ........... i like that