user_e31eb9_Robin_'s profile

Contributor

 • 

51 Messages

Tuesday, August 22nd, 2023 12:36 PM

Closed

Worried about .wav file malware in Voice Email

Hi!

(Not sure where to post this...?)

Since April we've received 3 Xfinity-verified emails delivering voicemail messages to us. I know they're not ours - even tho the email address is correct - bec we don't have email delivery enabled for voicemail AND none of the 3 ever showed up in our Voicemail as displayed online or on our phone.

But that's not why I'm asking for help.

I never click on anything in emails but today I decided to listen to the .wav file that contained the message in the most recent email. It sounded like spam.

How safe is it to listen to - not download - a .wav file from within an Xfinity-verified email?

Is listening to the file from within the email the same as downloading it and listening?

I know that Xfinity takes Security very seriously (and the emails had the Xfinity-verified mark) but could that file have delivered malware to my iPad? How worried should I be?

:)

(Edited to add information & fix a typo)

Accepted Solution

Gold Problem Solver

 • 

26K Messages

1 year ago

... I'm seeing all those indicators of an Xfinity-verified email & I always use the web email Connect Xfinity site. ...

Very good. I wouldn't say it's complete safe, but the contents of Verified email are probably as safe as you can get. As far as I know spammers and scammers have not yet figured out a way to mark their email "Verified".

... Just tried to view the links you gave me for phishing & spam but landed both times on "Bad Request" pages. ...

I don't know what causes that. I suspect the pages are poorly coded as "internetsecurity.xfinity.com" is the only site I know of that gives me that error message. I often have to switch browsers to access those links.

But I guess my real question was related to the audio file itself ...

I'll never say never, but my best guess is that audio files, especially in a "Verified" email, should be safe. Even if they contained malware, my understanding is that they couldn't hurt anything unless the system that accesses them has already been compromised. 

Good luck!

Please be aware that there are 2 kinds of responses in this Forum: Replies and Comments. When you Comment on a post by scrolling down to "Comment on this post here...", I am notified of your response. But if you select Reply, I am NOT notified and may not be aware of your response.

Contributor

 • 

51 Messages

@BruceW​ 

Hi!

I'm happy to hear that things ought to be fine!

Also, I tried the 2 internet security links again (still Safari, but on a different device). Got thru fine!

Those pages are excellent resources, have fav'd them.

Thank you very much!

Robin

:)

Gold Problem Solver

 • 

26K Messages

1 year ago

... we've received 3 Xfinity-verified emails delivering voicemail messages ...

Are you sure the emails were Xfinity Verified? Note that the logo is only legitimate when you view a message in their web email site https://connect.xfinity.com. Also note that anyone can insert an XFINITY Verified logo in the body of an email, so it's important not only that it is present, but that it is in the correct locations:

  • preceding the email subject line in the list of emails
  • above the subject line when the email is opened.

See https://www.xfinity.com/support/articles/comcast-verified-email for examples of valid logo placement. A logo in the body of the email does not count.

Samples of recent phishing messages can be found at https://internetsecurity.xfinity.com/help/alerts under "Top Phishing Scams".

To report a scam email to Comcast, follow the "Report Spam and Phishing Emails" link on https://internetsecurity.xfinity.com/help/report-abuse and scroll down to the "Report Phishing Emails" section.

Please be aware that there are 2 kinds of responses in this Forum: Replies and Comments. When you Comment on a post by scrolling down to "Comment on this post here...", I am notified of your response. But if you select Reply, I am NOT notified and may not be aware of your response.

Contributor

 • 

51 Messages

@BruceW​ 

Hi! Thank you for replying!

Yes, I'm seeing all those indicators of an Xfinity-verified email & I always use the web email Connect Xfinity site. 

Just tried to view the links you gave me for phishing & spam but landed both times on "Bad Request" pages. I'll do searches, try to find them. 

But I guess my real question was related to the audio file itself - do I know that it's OK because included within an Xfinity-verified email? And is listening to it from within the email - "viewing" it - rather than downloading it to my device inherently safe, even if the file itself contains malware? 

I've probably made too much of this, but receiving someone else's voicemails is weird to begin with & when I clicked on the .wav file I wondered if I'd made things worse. 

Robin

:)

forum icon

New to the Community?

Start Here