: PM Spam Attacks
Attention Members:
Once again, I'd like to alert everyone to be wary of PMs from "mysterious" sources claiming to be some sort of moderator or administrator for the site. Unless you are getting a PM from myself, DMAG, JoeBecker, or Wade, it's not the real deal.
That said, I've attempted to put some measures in place that would curb the ability of spammers to send PMs. Cross your fingers that it works, but our forum should now require 5 posts before PMing becomes activated. If you are a legitimate new member and have issues with the service, you are welcome to email me at the link below and I will take care of it for you.
Thanks,
Pat (patrick.c.adair@gmail.com)
Will H 02-11-2010, 01:23 PM Thanks, I got one today and yesterday.
cairn99 02-11-2010, 01:34 PM Thank you. I received one this morning and figured it wasn't legite.
Kahbrohn 02-11-2010, 01:38 PM No one writes me anyways so I should be safe.
JoeBecker 02-11-2010, 01:44 PM Thanks, I got one today and yesterday.
Do you remember whether they were from the same member?
"ModeratorTeam" was the one that I banned.
psaulesl 02-11-2010, 02:30 PM Do you remember whether they were from the same member?
"ModeratorTeam" was the one that I banned.
I deleted one from "ModeratorTeam"
Tater's Dad 02-11-2010, 03:48 PM None for me.... oh well :mad:
davecanuck 02-11-2010, 04:11 PM thanks for the heads up deleted immediately, i think the last batch was "ladyadministrator" or something.
thanks to our moderators for being right on top of this kind of stuff, Pat also thanks for any preemptive measures you put in but the vbulletin software may need a service request to add this feature
Well the site hasn't crashed since I added the new permissions so I assume I actually pulled it off. It should stop PM spamming at the very least, but there isn't a ton we can do about other types of spam. A lot of the other forums I visit are getting attacked just like us.
Will H 02-12-2010, 07:25 AM Do you remember whether they were from the same member?
"ModeratorTeam" was the one that I banned.
Yes the same member "Moderator Team".
todde702 02-12-2010, 08:36 AM Gaze, isn't the forum site and the PM's stored in a SQL or MYSql database? I could probably write a script you could run on the DB to delete any such messages so infrequent members don't "check it out" a week or more from now.
Aus Patriot 02-12-2010, 08:46 PM Been getting a few in the last couple of weeks.
All from ModeratorTeam
navy48 02-13-2010, 07:58 AM Do you remember whether they were from the same member?
"ModeratorTeam" was the one that I banned.
I got one from the "moderator team" today as well. I PM'd GAZE before I found this thread.
glad you guys are on top of it. :smiley_thumbs_up:
Gaze, isn't the forum site and the PM's stored in a SQL or MYSql database? I could probably write a script you could run on the DB to delete any such messages so infrequent members don't "check it out" a week or more from now.
You might as well be speaking french to me, man. I don't know a whole lot about vB software or how the info on this site is stored. I've brought the issue up to DMAG so hopefully he can come up with something. Fortunately, he runs 2 or 3 other major auto forums through the same server so I'm sure if he's having a problem with one, it's a problem with all of them. Should help get the issue resolved.
Afmcronnie 02-13-2010, 10:29 PM Important message from the forum administration!
--------------------------------------------------------------------------------
Dear, discojables;idjk;patriot666;Afmcronnie;FF128!
A virus alert was noticed on your computer.
We highly recommend you to check your computer and perform online virus check at our site immediately: http:(deleted for safety)-2010.org/discoja...mcronnie;FF128
If you do not pass this test* we will have to delete your account and forward a complaint to your ISP.
----------------------------------------------------
Forum Administration www.jeeppatriot.com.
Just got this in a PM tonight. Thanks for the heads up.
JoeBecker 02-13-2010, 11:13 PM When reporting that you have received a PM that is phishing, it is important to tell us which user was the sender so that we can take action against them.
Afmcronnie, which user sent you that PM?
Thanks,
JoeBecker
Broccoli Iglesias 02-13-2010, 11:32 PM a member (junior member with 0 posts) sent me a PM. His name is: SUPERMODER. saying that he detected a virus in my computer, blah blah blah, and sent me a link to click. (i didnt click it)
just letting everyone know its probably spam.
Scottg173 02-13-2010, 11:36 PM I got one from "supermoder" today.
JoeBecker 02-13-2010, 11:37 PM Please report these users to me.
Send me a PM, or post in this thread.
PM Phishing jerks banned to date:
LadyAdministrator
ModeratorTeam
RooTModeratorx (tried to get this one before they could do anything)
SuperModer
atomic 02-14-2010, 02:10 AM I got a message from SuperMode claiming that this site detected that I had a virus and urged me to go to a site to be scanned or loose my membership to this site. The site they are trying to get people to go to will install a trojan on your system which can allow them to take over your system and possibly your identity. DO NOT GO TO THE SITE!
Wooden Dog 02-14-2010, 02:07 PM Dear, w4rh4wk;steven692;cospas;09Riotcuda;Wooden Dog!
A virus alert was noticed on your computer.
We highly recommend you to check your computer and perform online virus check at our site immediately: ----- Dog
If you do not pass this test* we will have to delete your account and forward a complaint to your ISP.
Got this one today, also from supermoder.
jaben2 02-14-2010, 03:10 PM Got one today at around 1000 from supermoder
miketmx 02-14-2010, 03:12 PM I got that PM today but I deleted it without opening it because I saw these other scam reports about it.
Rb4022 02-14-2010, 08:07 PM Received one a few weeks ago from "Lady Administrator" and one a few days ago from "Moderator Team". Deleted both without opening.
dixiedawg 02-15-2010, 09:24 AM I thought that when we hit the "report post" button you would get the entire post?? Otherwise I would have copied it for you. They look like they come from the site admins? I had one this morning that I reported.
JoeBecker 02-15-2010, 09:53 AM I thought that when we hit the "report post" button you would get the entire post?? Otherwise I would have copied it for you. They look like they come from the site admins? I had one this morning that I reported.
Yes, your reported PM (the report went to the moderator support area) showed who sent it to you.
Afmcronnie's cut and paste did not.
To report a PM to the admin/moderators click on the little red warning sign at the top right of the PM.
See attached picture if you have a question as to where the report button is located.
6072
PM Phishing jerks banned to date:
LadyAdministrator
ModeratorTeam
RooTModeratorx (tried to get this one before they could do anything)
SuperModer
Note that the real admininstrators/moderators of this forum are DMAG, Gaze, JoeBecker, Wade (there are a few others but they are not active) and our username colors as well as the icon that appears below our member names indicate us as admins/moderators. Until a user is able to hack the Vbulletin software this should be fairly secure.
dixiedawg 02-15-2010, 11:03 AM If I could get their e-mail addresses, they'd be joining a lot of web sites and clubs. And maybe helping out some poor Nigerian folks too.
Still better than if I ever meet them in person.
It might never happen, but I have one great story about someone laughing about something they used to do, that happened to a friend of mine once, at a party years later. I bet to this day they have no idea why "that crazy dude" knocked them out at that party.
redoscar3 02-15-2010, 11:49 AM @Afmcronnie.........I always get a big kick out of these kind of spam messages. Since I've been using GNU/Linux for nearly 8 years now, it's pretty laughable that a virus would be detected on my computer.
dixiedawg 02-15-2010, 01:44 PM I had my first one this morning, but thanks to the great moderators on here I know what it was. I of course used the button in the upper right, the red and white triangle that sort of looks like a yield sign, to report the post.
homac 02-16-2010, 12:42 AM A big thank-you to the moderators for dealing with all this.
Appreciate you gathering all the stuff and doing whatever you do on the forum.
1st Jeep 4Me 02-16-2010, 07:42 PM The spam/phishing PMs also request a Read Receipt.
Thanks guys for the heads up received one from Supermoder as well. Good job at keeping us in the loop the someone claiming they are a MOD with 0 post ticked me off that things weren't right.
jack.allwardt 02-17-2010, 03:50 PM Again thanks! ja
Roadstar-Patriot 02-17-2010, 09:35 PM Here's mine...
Dear, PatriotGuy;Roadstar-Patriot;RZ350;Szabo84;zsmom!
A virus alert was noticed on your computer.
We highly recommend you to check your computer and perform online virus check at our site immediately: a complete idiot for clicking on this site dot com/
If you do not pass this test* we will have to delete your account and forward a complaint to your ISP.
----------------------------------------------------
Forum Administration
****************************************
Oh yeah, to all the "real" mods who run this site... Thanks for the hard work... And, could you please pass this grain of salt along to those spammers who think we would really fall for their BS...
Thanks...
Afmcronnie 02-18-2010, 10:39 PM Oh yeah, to all the "real" mods who run this site... Thanks for the hard work... And, could you please pass this grain of salt along to those spammers who think we would really fall for their BS...
Thanks...
I guess it's like asking one hundred women at a crowded bar to have sex with you, you only get slapped 90 times....
Tiburon 03-11-2010, 09:29 AM I received an E-mail today claiming to be from this site. Said that I had a PM from "keith". I did not click on the links but came directly here. I have no PM from anyone named "keith". ???
Note to all. We'll be upgrading within the next few days to a newer version of the software that should hopefully end the horrible spam.
We do apologize that you have had to deal with it. We really want to ensure your time spent here is fun and not frustrating.
Thanks for understanding!
cairn99 03-13-2010, 09:10 AM Thanks for putting your time and effort into making this site what it is today.
Pipe Tobacco 03-22-2010, 08:15 AM Hello Everyone:
I just wanted to let you know that I received the following PRIVATE MESSAGE today. I am presuming that it is FAKE, so please let me know otherwise. Since I believe it is fake, and is an attempt to phish, I will ignore it:
Important message from the forum administration!
Dear, Muttley;tayl0216;Calboytex;SeaRiot;Pipe Tobacco!
A virus alert was noticed on your computer.
We highly recommend you to check your computer and perform online virus check at our site immediately: - Tobacco
If you do not pass this test* we will have to delete your account and forward a complaint to your ISP.
----------------------------------------------------
Forum Administration -
Forward Message
I am presuming that this means unfortunately the upgrade was not completely successful in stopping this rudeness. However, I thank all of the mods for their efforts to try to help fix this.
PipeTobacco
JoeBecker 03-22-2010, 08:46 AM Pipe Tobacco,
Yes this is a phishing attack to be ignored.
What was the username who sent it?
What was the send date?
Did you actually receive it today or did you just open it today?
We need that information (not a copy of the PM) to deal with the offending party (if we haven't already).
EVERYONE,
Note that the real admininstrators/moderators of this forum are DMAG, Gaze, JoeBecker, Wade (there are a few others but they are not active) and our username colors as well as the icon that appears below our member names indicate us as admins/moderators. Until a user is able to hack the Vbulletin software this should be fairly secure.
To report a PM to the admin/moderators
click on the little red warning sign at the top right of the PM.
http://jeeppatriot.com/forum/attachment.php?attachmentid=6072&d=1266246146
This is the best way to report a PM. It gives us a copy of the message as well as the member who sent it.
This is also the way to report any abusive PMs.
Thanks,
JoeBecker
Pipe Tobacco 03-22-2010, 09:24 AM JoeBecker:
Sorry Joe, I thought I had copied more of the message than I did. I actually see now that the message was sent on FEBRUARY 13... but that is very odd... I look at and check the area for private messages OFTEN. I am pretty darn sure I did so last Monday (March 15th) when I logged it... as it is my habit to systematically search around every Monday, and then just glance casually the rest of the week. Here is the total. I will also go back and click the red warning symbol back in the PM as instructed:
[B]02-13-2010, 10:33 PM
SuperModer SuperModer is offline
Banned
Join Date: Feb 2010
Posts: 0
Again, thank you for your work and help!
PipeTobacco
|