This is for the Constant Contact IT Tech named Angel who is in Colorado (I think):
You are helping me because my account is acting funky since midday today.
I forgot to mention: DON'T VISIT THIS VIRUS SITE BELOW !!!!
I accidentally yesterday went to CONTANTcontact with a dot com.
ONLY YOUR INFOSEC SHOULD VISIT THAT ON AN ISOLATED TEST SYSTEM!!
I may have even tried to login there and I foolishly clicked away a popup without reading it.
That was yesterday, and my screen flashed many times a few hours later.
The BRIGHT red and yellow warning flashed a big screen of text that stated that if I reboot I would lose "all my data".
So I rebooted and ran Microsoft scans and Malwarebytes.
Those found nothing. So I thought maybe it disappear at the time of reboot.
My site was fine this morning but stalled and won't load things in the afternoon.
Angel the tech observed that it was indeed odd behavior, maybe on your side.
She is actively working on this case, and you guys at CC have great tech support.
I hope one user couldn't harm much at CC, even with my stolen creds, but that fake site is problem.
This virus may be unrelated, but I thought it was worth mentioning.
Thanks to your fantastic tech team for helping.
Also, forgot to mention: I ran the pre-boot Microsoft scan at the time of first reboot. I was first prompted to re-enter my BitLocker key that I needed to obtain at the Microsoft site online. That was odd, but I thought that maybe the scan required it. Not too sure on that. The scans all found nothing and nothing new was installed and the extensions seemed general okay. That was yesterday, and my system now works fine, but it may relate to the scope of the virus. Hopefully it is not some scam by a sophisticated nation state acting with malicious intent.
Thanks,
Dan
