Rogers → Is this legit?

I logged in My account and this form appeared. Is this legit?

I wouldn't trust it. A tonne of red flags.

Asking for State and Zip instead of Province and Postal Code. Asking for the answers to your security questions, but not providing those same questions. Asking for SIN.

That just SCREAMS "phishing".

I suggest:

1) Run a virus scan to check to see that it's not your computer that has been compromised. FIRST AND FOREMOST! Don't log into anything else secure (banking especially) until you do this!
2) Call Rogers on the chance that it's something on their end that has been compromised.

You or Rogers has been hacked. As many of these bots include a keylogger we can assume your Rogers account number and password are already out in the wild.

For your own sake call Rogers and change both immediately. As mentioned above, do not log in anywhere till you've identified the cause of this issue.

Rogers will definitely want to be notified.

Yikes, that just screams identity theft.

I just logged into MyRogers and it doesnt have that, neither does it have that "Red Hot Deals" button on the top... So yeah, I'd say your machine is compromised and is redirecting to a totally fake Rogers site...

The "Red Hot Deals" button shows up if your region is set to QC.

Oh, interesting...

Go to another computer. change your rogers pw, then call rogers and put a block on your account for any changes. At this point, it likely woudn't hurt to put a block on your credit too such that any new credit application requires a verbal auth.

Run OP, run! But seriously, that is shady as shit. A Roger-specific pop-up that appears as soon as you sign in to your Rogers account, that's a dangerous phishing attempt. Even if the problem is at your end (ie. your computer is infected with something) I would contact Rogers so they know about this. You cut off the URL from your picture, hopefully you can get a fuller picture to send to Rogers.

You need to change your Rogers log in info but changing it on a compromised computer may not help much. You need to change it from a clean computer.

In the mean time I would start running antivirus scanners. What OS and antivirus do you have? Update and scan with it. I'll assume you have WIndows. Get MSE if you don't have an antivirus program. Also scan with malewarebytes then superantispyware.

It really, really smells of site redirection. What URL do you get if you bookmark the popup page? That should have the details you need to determine origin..

I'd change ISPs if that is legit because they don't ever need that much detail, but scammers/id thieves do.

IMHO I could see site redir if it happened when clicking on the Rogers link but getting the popup after entering the secure "MyAccount" says hack/bot to me..........could be wrong, anything is possible. But there's a lot at stake here security wise.

The OP hasn't stated if this now happens every time he enters the Rogers site and logs in or if this was a one time occurrence.

1) Get each of these »www.makeuseof.com/tag/li ··· s-start/
2) Follow directions for each to clean your machine
3) Reboot to Windows
4) www.malwarebytes.org - download and run the free scanner

5) Get anyone of these
»www.knopper.net/knoppix- ··· -en.html
burn it to a CD and boot from the CD each time you want to do web banking, or anything to do with credit card payments or personal info on the net.

lol if they even asked that from me on the phone or in person I wouldn't do business with them.

It's bogus questions they aren't even allowed to ask you in Canada unless you are getting a bank loan.

Either you or rogers has been rooted.

Clearly you've got something 'phishey' installed in your browser, activex or some malware, running identity theft. Did you notice it's asking for state and zip? Regardless of what we think of Rogers, that is not their form; whatever popped it, pulls solely the logo of the site you're on, inserts it up above, leaves all other wording generic enough to probably dupe many many people. Clear and aching red flag. I did a quick google on the wording, but it seems exactly like what's being requested of this HSBC customer: »forums.moneysavingexpert ··· 51835799

heh, whenever it asks for a sin... you know its a scam.

I wonder how it was pulled off...

I'm guessing you're referring to the question about the SIN? They're allowed to ask, but they can't require you to answer, and it's not just for bank loans. Also, I don't think you know what "rooted" means.

I didn't realize about the State and Zip, just the SN and the answers to my questions. It was at job, so IT will probably just delete everything and ghost the machine.