Spam Pms With Links To Spyware/malware

[Rolls]

I recommend whoever is admin here try and mass delete these PMs that have been sent to everyone if possible, I haven't bothered to check out the website that is disguised as 'new forums rules' but I imagine it is some kind of malware or virus.

The user that sent them was jurdreda

Edited April 13, 2009 by Rolls

[babyskyline]

Got the same crap. When the mouse is rolled over the link it shows a website address of

http://febul.ru/

[R31Nismoid]

Same issue as the other day (see below thread)

Users should be aware of such spam and not click links.

IPB have released an announcement about it to all Forum Owners, there no doubt will be some kind of fix coming - however i am unaware of deleting PM's from users, i dont think that would be a feature you'd want Admins to have

[evil_weevil]

Yep, just deleted it rigfht away!

[WHITE R32]

we had the same problem on bostcruising... i just suspended the account... which was also the same username

[Rolls]

however i am unaware of deleting PM's from users, i dont think that would be a feature you'd want Admins to have

True, and I'd like to think most users are smart enough to avoid such tricks, however I'm sure some will have fallen victim.

[purple_haze]

I got this email about a PM but my user name isn't "PartsGuy". Logged into my account and I noticed that my email address has been changed.

I've changed it to my email address, but should I be concerned ?

[JI34GT]

Ah f**k. Im like half asleep and I just clicked the link...shit...lol it took me to some russian discount meds site. dammit. ><

[R31Nismoid]

I got this email about a PM but my user name isn't "PartsGuy". Logged into my account and I noticed that my email address has been changed.

I've changed it to my email address, but should I be concerned ?

I don't understand.

What does "partsguy" mean?

And did you change your user ID? Click on the link? Give out your pass?

If none of the above, there is no way for someone else to change email address, you must have done it at some stage or someone else did if you left your user logged into a share PC etc

[Moanie]

great.. i got suckered in.. thankfully at work, so hopefully the network firewalls will have blocked anything

[mad082]

could the mods put in a filter like they have for swearing so that anytime this link is posted it gets changed to something else?

[WHITE R32]

what about the other eleventybillion links they will invent... youd never ever stop writing codes for it....

[R31Nismoid]

^^ exactly.

There really is no easy fix, simple as that.

IPB has some fixes coming, but it wont stop this from happening, no forum can. End of the day its user beware

[Marsss]

what could be the risk??? apart from being spammed?

[R31Nismoid]

How long is a piece of string?

Could be to promotional/rubbish websites, could be virus/malware... impossible to tell

[(B1) MR_fanny]

I saw it and didnt click cause the join date for that member was 2 days ago or something dodge. Im safe if i didnt click yeah? will go and delete now

[Revhead]

Yes mate, if you didn't click the link you'll be right.

A little bit more info from an IPB announcement:

It has come to our attention that a new wave of SPAM is originating via the Personal Messenger within IP.Board. It is believed that humans are registering to satisfy the reCaptcha requirements and then activating a "bot" to send hundreds of SPAM messages via the PM system.

So we're certainly not the only ones "lucky" enough to be targeted, hooray!

If the account registrations are indeed being completed by people then it's extremely difficult for any automated system to detect them as a spam account until they've already tried to deliver their payload (and to detect THAT the software has to include the functionality).

As always, your best bet is to keep your eyes open (a lot of spam accounts will have nonsensical names, they'll usually have a registration date within the last week, etc) and, most importantly, don't click any links you are uncertain about.

I hate spam as much as anyone, but unfortunately it's a fact of life these days - just delete it and move on

[AGE]

How long is a piece of string?

Could be to promotional/rubbish websites, could be virus/malware... impossible to tell

I clicked on the link that i received via a PM, and now, in the next few days I'm going to find out how to increase my penis size!!!

I'll post up a full DIY ASAP!

[R31Nismoid]

lol

[icydude]

I just received a spam pm containing a link to a malicious site from user, i did no click but anyone is free to try it out for yourself. http:// iefa.ru/

nuzgirba

http://www.skylinesaustralia.com/forums/nuzgirba-m61961.html