Skip to main content
commvault.com commvault.com
Solved

A strange message from LogUploads@commvault.com

Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Kamil WCommvault Certified Expert
  • Commvault Certified Expert
  • 83 replies

Hi guys,

The Customer received the following message a few days ago.

 

From: Commvault Log Upload Administrator <LogUploads@commvault.com>
Sent: Sunday, June 26, 2022 6:00 AM
To: XXXXX XXXXX  <xxxxx.xxxxx@xxxx.pl>
Subject: Automated message from EFT administrator

 

,
The password for account: ‘The Customer’s CCID’ will expire in 4 days. Please change your password at your earliest convenience. Instructions for changing your password via FTP, SFTP, and HTTP/S are provided below for your convenience:
1. Please enter the following URL into your browser: https://transfer.commvault.com/manageaccount
2. Supply your current password when prompted
3. Enter your new password and confirm
4. If approved, exit the browser and login as normal

 

Is this is something that is known for you, guys?

I have never seen this sender before.

The link takes me to the following website:

 

Can you confirm that this website is trusted? If so, can you tell me what this website is for?

Rgds,

Kamil

Best answer by J Dodson

Just after sending the above reply I found the following update from support today:

 

This is a legitimate email and expected behavior. Any users who have previously used our older ftp sites such as qnftp01.commvault.com or fasterftp.commvault.com these have been decommissioned and replaced with transfer.commvualt.com As an initial onboarding to the new site users received this email notifying them to reset their password so they can get setup on the new website. This site is used as a manual alternative for log upload when direct upload from the Commcell Console is not working or FTP upload is required for a restricted site for example.

 

And to clarify, this email addresses this particular account/password only and does not refer to any other account/password (ie ma.commvault.com, cloud.commvault.com, DR backups, or SQL DB). 

 

Hopefully this notification will be made clearer for future distributions.

View original
    Jos Meijer
    K
    antonio
    5 people like this
    • Jos Meijer
      Jos Meijer
    • K
      Kiran.S
    • antonio
      antonio
    • Michael Woodward
      Michael Woodward
    • MichaelCapon
      MichaelCapon
    Did this answer your question?

    5 replies

    A
    Byte
    Forum|alt.badge.img+3
    • askesi
    • Byte
    • 10 replies
    • June 29, 2022

    We had several customers receive a similar email.  We are waiting for an explanation from Commvault support.  Andy

    J Dodson
    Vaulter
    Forum|alt.badge.img+5
    • J DodsonVaulter
    • Vaulter
    • 21 replies
    • June 29, 2022

    This is a valid email and it is legit. The link that it takes you to is a valid Commvault site. This is an account that is used for FTP transfers (Cloud uploads). From our conversation threads on the Enterprise Success Program team, this account is an AD account that has a password that expires after 1 year (365 days). Customers manage this account/password and this notification is legit.

     

    There is still discussion ongoing as to future delivery of this notification as it is agreed that it comes off as suspect for phishing. 

     

    -Jeff
    MichaelCapon
    M
    2 people like this
    • MichaelCapon
      MichaelCapon
    • M
      Marcin Dziewanowski
    J Dodson
    Vaulter
    Forum|alt.badge.img+5
    • J DodsonVaulter
    • Vaulter
    • 21 replies
    • Answer
    • June 29, 2022

    Just after sending the above reply I found the following update from support today:

     

    This is a legitimate email and expected behavior. Any users who have previously used our older ftp sites such as qnftp01.commvault.com or fasterftp.commvault.com these have been decommissioned and replaced with transfer.commvualt.com As an initial onboarding to the new site users received this email notifying them to reset their password so they can get setup on the new website. This site is used as a manual alternative for log upload when direct upload from the Commcell Console is not working or FTP upload is required for a restricted site for example.

     

    And to clarify, this email addresses this particular account/password only and does not refer to any other account/password (ie ma.commvault.com, cloud.commvault.com, DR backups, or SQL DB). 

     

    Hopefully this notification will be made clearer for future distributions.

    -Jeff
    Scott Moseman
    MichaelCapon
    M
    3 people like this
    • Scott Moseman
      Scott Moseman
    • MichaelCapon
      MichaelCapon
    • M
      Marcin Dziewanowski
    Kamil W
    Commvault Certified Expert
    Forum|alt.badge.img+11
    • Kamil WCommvault Certified Expert
    • Author
    • Commvault Certified Expert
    • 83 replies
    • June 30, 2022

    Many thanks guys for all your replies.

    Everything is clear now.

    Rgds,

    Kamil

    S
    Commvault Certified Expert
    Forum|alt.badge.img+13
    • SSchmidtCommvault Certified Expert
    • Commvault Certified Expert
    • 92 replies
    • July 15, 2024

    thanks all maybe next time inform the casp partner ;) 

    M
    1 person likes this
    • M
      mfox

    Reply


    Most helpful members this week

    Terms & ConditionsCookie settings

    Cookie policy

    We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

     
    Cookie settings