Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Fake Bleeping Email Received


  • Please log in to reply
16 replies to this topic

#1 Achaemenid

Achaemenid

  • Members
  • 433 posts
  • OFFLINE
  •  
  • Local time:08:13 AM

Posted 21 December 2017 - 09:03 AM

I received an email saying I had a new reply to a thread I had started.

 

But when I came to the site, there was no new reply.

When I read the text of the messge, it was nothing but a line from a dictionary.

 

It seems the purpose of the email was to get me to click on the link, to facilitate someone hacking into my system.

 

Someone here undoubtedly knows more about this than I.

Maybe you can suggest a fix:

Wiping the HDD with DBAN?

and reinstalling?

 

I have a screenshot of the message if there is a way to post it.



BC AdBot (Login to Remove)

 


#2 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 9,042 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:09:13 PM

Posted 21 December 2017 - 10:10 AM

If you wish to attach the screenshot simply use the "More Reply Options" button at the lower left of the compose area and the full featured compose will come up.  There is an attachment option and you can choose, once the image is attached, to add it to your actual post via a link.

 

I suspect I know what thread this might have been from and if I'm correct the notification you got wasn't fake, but was for someone who was banned as a spammer before you ever saw the notification and, thus, the original post with the dictionary definition had been removed.  There would then be nothing to click-through to after the removal, but we can't reach out into someone's e-mail inbox to remove previously received notifications.

 


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

     . . . the presumption of innocence, while essential in the legal realm, does not mean the elimination of common sense outside it.  The willing suspension of disbelief has its limits, or should.

    ~ Ruth Marcus,  November 10, 2017, in Washington Post article, Bannon is right: It’s no coincidence The Post broke the Moore story


 

 

 

              

 


#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,780 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:13 PM

Posted 21 December 2017 - 07:42 PM

We have had a rash of spammers as of late. When we catch them, they are banned and replies are removed during the cleanup process.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 Achaemenid

Achaemenid
  • Topic Starter

  • Members
  • 433 posts
  • OFFLINE
  •  
  • Local time:08:13 AM

Posted 22 December 2017 - 05:53 AM

If you wish to attach the screenshot simply use the "More Reply Options" button at the lower left of the compose area and the full featured compose will come up.  There is an attachment option and you can choose, once the image is attached, to add it to your actual post via a link.

Which icon is the attachment option, please?


Edited by Achaemenid, 22 December 2017 - 05:55 AM.


#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,780 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:13 PM

Posted 22 December 2017 - 06:31 AM

How do I post a screen shot?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 Achaemenid

Achaemenid
  • Topic Starter

  • Members
  • 433 posts
  • OFFLINE
  •  
  • Local time:08:13 AM

Posted 22 December 2017 - 07:47 AM

I was told I am not allowed to use the image extension from one of the sites mentioned in the link you gave me.

 

Finally, TinyPic worked.


Edited by Achaemenid, 22 December 2017 - 07:53 AM.


#7 Achaemenid

Achaemenid
  • Topic Starter

  • Members
  • 433 posts
  • OFFLINE
  •  
  • Local time:08:13 AM

Posted 22 December 2017 - 07:52 AM

If you wish to attach the screenshot simply use the "More Reply Options" button at the lower left of the compose area and the full featured compose will come up.  There is an attachment option and you can choose, once the image is attached, to add it to your actual post via a link.

 

I suspect I know what thread this might have been from and if I'm correct the notification you got wasn't fake, but was for someone who was banned as a spammer before you ever saw the notification and, thus, the original post with the dictionary definition had been removed.  There would then be nothing to click-through to after the removal, but we can't reach out into someone's e-mail inbox to remove previously received notifications.

 

 

 

 

[Image containing member e-mail address has been removed.]


Edited by britechguy, 23 December 2017 - 10:22 AM.
Removed image that revealed member e-mail address


#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,780 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:13 PM

Posted 22 December 2017 - 08:24 AM

How do I post a screen shot?

I was told I am not allowed to use the image extension from one of the sites mentioned in the link you gave me.
 
Finally, TinyPic worked.

I removed that site.

Your screenshot indicates Arsen01 was the individual who responded to your post. This member was subsequently moved to the Banned Spammer Group by boopme, a Global Moderator and his reply was split from your topic and moved to spam jail which confirms why it was not there when you returned to that topic.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 9,042 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:09:13 PM

Posted 22 December 2017 - 08:50 AM

And I'm the one that moved this piece of spam out of the thread in question.

 

Notifications go out to individuals following a thread the moment another message is posted to it.   If that message happens to be spam, and the moderation team gets to it before the member tries to, it will no longer be present.

 

It is impossible to get a notification message generated any other way, but if the notification is triggered by a spam post we here at BC are, on occasion, faster at getting rid of it than members following a thread are about actually reading through their e-mail and trying to follow a click-through link to something that's been removed.

 

That's precisely what happened here.


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

     . . . the presumption of innocence, while essential in the legal realm, does not mean the elimination of common sense outside it.  The willing suspension of disbelief has its limits, or should.

    ~ Ruth Marcus,  November 10, 2017, in Washington Post article, Bannon is right: It’s no coincidence The Post broke the Moore story


 

 

 

              

 


#10 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,720 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:13 AM

Posted 23 December 2017 - 03:11 AM

@Achaemenid I don't know if you are aware, but an email address is visible in your screenshot.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#11 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 9,042 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:09:13 PM

Posted 23 December 2017 - 10:21 AM

@Achaemenid I don't know if you are aware, but an email address is visible in your screenshot.

 

I have edited the image out of the message that contained it since the issue has been completely addressed and it was one of the member's timing in checking notifications where a spam message was deleted.  There was no falsified e-mail message.


Edited by britechguy, 23 December 2017 - 10:24 AM.

Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

     . . . the presumption of innocence, while essential in the legal realm, does not mean the elimination of common sense outside it.  The willing suspension of disbelief has its limits, or should.

    ~ Ruth Marcus,  November 10, 2017, in Washington Post article, Bannon is right: It’s no coincidence The Post broke the Moore story


 

 

 

              

 


#12 Achaemenid

Achaemenid
  • Topic Starter

  • Members
  • 433 posts
  • OFFLINE
  •  
  • Local time:08:13 AM

Posted 26 December 2017 - 06:43 AM

@Achaemenid I don't know if you are aware, but an email address is visible in your screenshot.

Thanks for telling me about this. I think Britechguy has removed the screenshot.



#13 Achaemenid

Achaemenid
  • Topic Starter

  • Members
  • 433 posts
  • OFFLINE
  •  
  • Local time:08:13 AM

Posted 26 December 2017 - 06:45 AM

Thanks to quietman7 and Britechguy for resolving this issue for me.

 

I wish there were more than spammers responding to my post on verifying signatures because I still don't know how to do this.



#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,780 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:13 PM

Posted 26 December 2017 - 08:47 AM

You're welcome on behalf of the Bleeping Computer community.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#15 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,720 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:13 AM

Posted 26 December 2017 - 09:19 AM

 

@Achaemenid I don't know if you are aware, but an email address is visible in your screenshot.

Thanks for telling me about this. I think Britechguy has removed the screenshot.

 

 

You're welcome. Yes, britechguy removed the link to the screenshot. I don't know if he removed the screenshot itself, but since there is no longer a link, nobody can find it.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users