Weird notification on Cox App
Hello guys, I been get pop ups on my cox wifi app saying that " A new device Sagemcom has connected to your home network" Now I do not recognize that device at all, I googled that device and it comes up as a router for some kind. I called Cox multiple times and was told that they were not to sure what it is. Now I have reset my wifi pass and also did a default to my modem/router (I have the white gig blast one) after that was done I got 15 pop ups on the wifi cox aps saying that " A new device called BE31472D6EB5 has connected to your home network. They are all not the same numbers all 15 are different. They are not Mac address and I did verify that with reps from cox. Today I got another popup from that Sagemcom device again has connected to my network. All 15 pop ups on the cox app about devices connecting did not come in at the same time. I am not sure if my router is hacked or if this is a cox issue. The cox app has notified me about them blocking a website 4 times on 4 different devices 2 phone and 1 PC and 1 Pad. The website is called H.parrable.com. I never have gone to that website at all and from what I am seeing it is malware. Not sure what to do.2.5KViews0likes14Comments
SOON TO BE 2021 ... AND THE COX WEB-MAIL "SPAM BOMBARDMENT" STILL CONTINUES
https://ibb.co/gFPnY57 The infestation that's getting through Cox mail servers has got so bad that it's outright inexcusable, and I dread every moment when it comes time to check my email. In many ways it seems like Cox is a magnet for attracting not just spam, but other exploits, such as spoofing, phishing and pharming. Stuff that cyber-criminals use to deliver malware, attract victims to malicious websites or to steal confidential and sensitive data. In all honestly, I get more garbage than legitimate messages that it's become a frustrating chore sifting through the mess it creates.Not to mention the hours I've wasted in the daunting task of creating over a hundred, non-effective, "filter rules" to weed out some of the reoccurring pests.In fact my Inbox looks no different then my Spam folder, each containing a mixture of both spam and legitimateemails (just as the image shows above). "Marking" an email as spam is a joke too, and you’re a fool in trying to utilize that option because it does absolutely nothing. Perhaps it’s because protective measures are not being implemented by the server. But even if they were, I shouldn’t be receiving the samegarbageevery single day. And just to prove I'm not exaggerating, here a "small list" of the garbage accumulated in a typical work week: SelectHomeWarranty, Gadget Junkies, Leaf Filter Discount, Sams Club reward, CVS Pharmacy Survey, AltaiBalance, Truth_Finder, Caringforaparent.com, VeteranInsuranceDiscounts, Support Center, Soft Erections, Home Solar Survey, PowerPro-PowerSaver, FreezAir Pro, UV PhoneSanitizer|SterilizerXf, Talcum-powder-lawsuit settlement.com, TalcumPowderLawsuit, Dream Home Ideas, Pest Control, Max-Performer, ProbioticEase|Special, Dear Beneficiary, eharmony Partner, Protect Your Home - ADT Premier Provider, awesomestuff2buy.com, Exclusive Tactical Flashlight, NationalConcealedAcademy, REPLY ME URGENTLY, Wheel of Fortune, FRONTLINE KN95 Facemask, Vivint.SmartHome, Gemini Trust, AAGMortgage, Premium Mattresses by Lull, BANK OF CHINA, SeniorsDiscountsClub Info, PowerPro-PowerSaver, Nutrisystem Discount, BestCarInsurance, Pure Radiance, TommyChong, BoyScoutsAbuseLawsuit.com, Anti-Virus Protection, EZBatteryReconditioning, seniorperks, Boundery eBulb, Nerve Renew Wes, RoundUp Lawsuit, Walk-in Safety Tub, GutterProtector.coPromo, SunPower Promo, Buy Mask Shield, Male Enhancement, InjurySurvey.com Info, Cannabis Gummies, DoGoodPoints, SNOWTeethWhitening, FreeFlashlight, Enlarged Prostate, PlatinumAutoWarranty, BathroomRenovationShop, USAMilitarySavings Info, RoofingSurvey, Oil Change Coupons, Diet Legends Keto Fuel, NationalConcealedAcademyTraining, Smart Living Tips, ZantacInjuryHelp.com, ShopThePersonalButcher Ad, Nutrition Tips, FundsForVictims, Crepe Erase. Not only is it enough to make your head spin, but it's an issue that's shared with thousands of other Cox customers who are equally just as frustrated. In fact this abuse has been going on way too long and it's about time that the company finally takes immediate action to combat these security issues - rather than continuing to ignore them over the years by neglecting the basic techniques for securing their systems - and thus leaving us vulnerable. Frankly, I strongly feel that we as consumers deservemore consideration than what we've been getting, as well as receiving the best protection against alloutside threats. After all, if Gmail can protect their users from spam and other exploits for free, then why can't Cox at least tryby doing the same?With that said, I'm convinced that Cox is technologically behind the eight-ball and is seriously in need of updating or adding more security layersto get back up to speed. Please weigh in if you agree. NOTE TO MODERATOR: Judging by the many posts on this particular subject during the past several years, this has been an ongoing issue that has yet to be resolved. Since this is forum open for discussion, it would be greatly appreciated that you allow more ample time for comments and/or suggestions to be heard before making the final decision of marking this thread as locked. Thank you.3.9KViews0likes11Comments
Arris Modem Widespread Malware Attack DNS posioning!!
There is definitely something going on with internet service. Apparently Arris Modem/Router has a critical backdoor that hasn't been patched. Last month my entire network was compromised. DNS traffic was being redirected to malcious servers. This was very well done, I think I may have been infected for at least 2 months. The attack was stealth. Symptoms Empty folders Timestamp manipulation Hides malicious applications, in random folders, and alters timestamp to make it hard to detect early on. Controls the clicks of computer mouse. Keylogger Downloads fake certificates Task manager had tons of .exe processors Updates legit software with malicious script Screenshots, video capture. System restore or installing Windows 10 will try and make it look like a fresh install but really it's fake, made to look just like the real thing. Then came the botnet activity and, Denial of Service, and then my router was destroyed. Even after I unplugged my computer from the network, they were still able have some control. Any devices that were conected to the network will be affected Internet would disconnect Hacker has replaced my network connection with different network that was redirecting my connection to hacker server. So I was given a new router new IP address, and I tested it on a different computer that was unaffected and I monitored for about a week. Then I start noticing suspicious activity Devices Managment installed 10 different type of Network adapters. Then IP address change and DNS traffic was being spoofed again. Cox Customer Service and Technicians don't see a problem. According to them the routers are very secured and there isn't a backdoor lol. There is an entire article about Arris routers. Anybody with similar experience!!!!1.7KViews0likes0Comments
Zeus scam
It got me! Can't use My browser due to Zeus pop up that threatens to erase my hard drive if I don't call the number provided. I have Windows 10. I have tried a couple malwar removing programs to no avail and fear I am closing in on the most radical of solutions I.e., reformatting the hard drive. Any guidance that would send me in a better direction would be greatly appreciated.2.2KViews0likes1CommentSecurity issues
Security authentication is on an untrusted server of cox security in Alanta Georgia. The compromised server certificate is set to expire in 2018. So why is Cox communication security using an unsecured server and security on my account? They swear they do not hack or spy on their customers. What a crock! STOP HACKING MY SERVICE. Take my computers off your hacked Cox Abuse server causing denial of service, drive-by of malware attacks, port scanning on my account, slowing down my Internet service by stealing bandwidth. Intnentionally putting my systems and private network on your trojan horse of malware, spyware, and viruses, that,s not cute; HACKING is a crime. I see you mofos, get a life. Stop sending fake cox abuse text to my cell phone. You are busted. Next step law enforcement.Solved4.7KViews0likes8CommentsWhy are you hacking my service?
Cox communications are thieves, they offer hacked services. They claim they offer double the speed that is a lie, the service I have is hacked by Cox communication employees. The McAfee Security is a Trojan horse that is connected to a malware/spyware server. The service I receive is hacked services. I am suppose to receive is double speed of 50 Mbps instead I receive less then 5 Mbps. Cox employees are accessing my computer putting unauthorized administrators, credentials, and passwords on my computer. They are performing daily Denial of Service attacks, fruggle attacks, drivebys and ping of death attacks on my service from Cox Abuse ip addresses 24.*.*.*. The so call Cox Abuse text message is "Multimedia messages are being sent to your device, but your device doesn't support these messages. Visit your nearest ... for new device options". I am told that Cox Abuse does not send text messages. So who is it sending the messages? The technician that came to my house a month ago claims I had a bad router, but when I put three new routers on my network, they were all hijacked by CoxCommunication Security who change the administrators name to BLAH, BLAH, changed the passwords, fixed the settings so that I could not reset the routers or gain access by remote to the routers, I was denied access to my new routers from a Cox Abuse IP address, Cox Abuse is sending text messages to my cellphone for illegal wiretaps on my cellphone service. Cox Communications always changed my password to my accounts on my computers, deleted partitions forcing me to re-install the system, delete evidence and logs from my computer with unauthorized credentials on all my system. They also hack my Cox account then claim that only the customer can change the password. Cox Communications offers cyber criminal services, I have proof that I am being cyber stalked, and cyber bullied by Cox Communications security personal or hackers employed by Cox Communications. I have proof of all the criminal activity that is preformed on my service on DVD, so deleted the information from my computers and usb's are a waste of time for the hackers. I have over 6000 pieces of evidence from the time my service was put on their trojan horse to the present. Cox claims my speed is doubled for faster internet service that is a sham, I am paying 80 dollars a month for, this fraud and malware/spyware services.Solved14KViews0likes12Comments
Is a hacker using IP address 10.3.48.1 upstream from my router?
I have received an Overage Notice from Cox about my Internet utilization rate. In checking the usage meter on Cox.net, late in September my usage suddenly surged from maybe 1.5GB per day to now over 10GB per day, with spikes up to 20GB per day. One day, usage was fine and the next day it spiked, and is now remaining consistently high. I have scanned my system using a variety of anti-malware products, with no results. I'm resetting the router to default today and reconfiguring everything, including the wireless password. However, when I do a tracert from my computer, for example to Google.com, I am getting the following information: Tracing route to google.com [74.125.225.233] over a maximum of 30 hops: 1 6 ms 6 ms 6 ms 10.3.48.1 2 7 ms 8 ms 8 ms ip68-100-3-241.dc.dc.cox.net [68.100.3.241] 3 8 ms 8 ms 8 ms ip68-100-3-113.dc.dc.cox.net [68.100.3.113] 4 7 ms 7 ms 6 ms mrfddsrj02gex070002.rd.dc.cox.net [68.100.0.145] 5 8 ms 9 ms 7 ms 68.1.4.246 6 10 ms 8 ms 8 ms ip70-167-150-18.at.at.cox.net [70.167.150.18] 7 9 ms 9 ms 8 ms 216.239.46.250 8 9 ms 8 ms 8 ms 72.14.236.146 9 16 ms 18 ms 16 ms 72.14.235.12 10 23 ms 24 ms 24 ms 72.14.239.66 11 50 ms 49 ms 48 ms 72.14.237.213 12 49 ms 48 ms 53 ms 72.14.237.214 13 48 ms 48 ms 52 ms 209.85.240.77 14 47 ms 49 ms 48 ms dfw06s26-in-f9.1e100.net [74.125.225.233] Trace complete. Why is the 10.3.48.1 address sitting upstream from me? That address did not use to appear in a tracert prior to this surge, but I cannot state that it appeared right before the surge, either. A "tens address" (IP address that is 10.x.x.x) is not a routable address and is used only for local networking. Is that address part of the Cox network? I am using the Motorola Surfboard 6580, and have not changed the configuration. I know that the 10.3.48.1 address did not used to appear while using the Surfboard, but now it does. I cannot pinpoint in time when the change appeared. I am concerned that someone has inserted a system upstream from me and is now hijacking my Internet service, not to mention violating my privacy. Could an attacker have inserted a system on the network so that they can act as my router, control my DNS, and inspect my network traffic? I cannot find any information regarding Cox using a 10.x.x.x address in their home consumer Internet service. Thanks for any help or insight anyone can offer.5.1KViews0likes4CommentsSTICKY: Information about the Mac 'Flashback Trojan'
The current Flashback Trojan that is targeting Mac users masquerades as an Adobe Flash payer plug-in installer. It has also begun taking advantage of Java.To learn more about how to detect and remove the virus, see our Help/Support Article on Cox.com: Detect Flashback Trojan Malware On Your Mac Computer6.4KViews0likes0Comments
Arris Modem Widespread Malware Attack DNS posioning!!
There is definitely something going on with internet service. Apparently Arris Modem/Router has a critical backdoor that hasn't been patched. Last month my entire network was compromised. DNS traffic was being redirected to malcious servers. This was very well done, I think I may have been infected for at least 2 months. The attack was stealth. Symptoms Empty folders Timestamp manipulation Hides malicious applications, in random folders, and alters timestamp to make it hard to detect early on. Controls the clicks of computer mouse. Keylogger Downloads fake certificates Task manager had tons of .exe processors Updates legit software with malicious script Screenshots, video capture. System restore or installing Windows 10 will try and make it look like a fresh install but really it's fake, made to look just like the real thing. Then came the botnet activity and, Denial of Service, and then my router was destroyed. Even after I unplugged my computer from the network, they were still able have some control. Any devices that were conected to the network will be affected Internet would disconnect Hacker has replaced my network connection with different network that was redirecting my connection to hacker server. So I was given a new router new IP address, and I tested it on a different computer that was unaffected and I monitored for about a week. Then I start noticing suspicious activity Devices Managment installed 10 different type of Network adapters. Then IP address change and DNS traffic was being spoofed again. Cox Customer Service and Technicians don't see a problem. According to them the routers are very secured and there isn't a backdoor lol. There is an entire article about Arris routers. Anybody with similar experience!!!!
