vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Community Lounge (https://vborg.vbsupport.ru/forumdisplay.php?f=13)
-   -   Am I being hacked?????? (https://vborg.vbsupport.ru/showthread.php?t=83505)

Rick Sample 06-21-2005 09:42 PM

Am I being hacked??????
 
I've been receiving these e-mails which mean nothing to me:

Dear user bullittmustang,

You have successfully updated the password of your Neo account.

If you did not authorize this change or if you need assistance with your account, please contact Neo customer service at: administrator@neo.rr.com

Thank you for using Neo!
The Neo Support Team

_______________________________

But today I recieved this e-mail:
Dear user rick,

You have successfully updated the password of your Muscle-mustangs account.

If you did not authorize this change or if you need assistance with your account, please contact Muscle-mustangs customer service at: administrator@muscle-mustangs.com

Thank you for using Muscle-mustangs!
The Muscle-mustangs Support Team



Then in the From field, it says: Administrator@Muscle-Mutangs.com

I'm not sure how they new my name either. I don't use it for my accounts, e-mail addresses, passwords, etc. Attached is a zipped file called Passwords.Zip. Which I'm sure is a virus.

Guest190829 06-21-2005 09:52 PM

Are you members of the forums? If you didn't recently change your password then something is up. E-mail the administrator to see what the problem is. Also, I would change all your passwords just to be on the safe side.

Rick Sample 06-21-2005 09:58 PM

Quote:

Originally Posted by Danny.VBT
Are you members of the forums? If you didn't recently change your password then something is up. E-mail the administrator to see what the problem is. Also, I would change all your passwords just to be on the safe side.


I'm actually one of the owners, but we don't have any e-mal accounts that are Administrator@muscle-Mustangs.com. A matter of fact, we don't have any e-mail accounts set up.


I'm not sure if someone actually hacked my site or if they are just pretending like they did to get me to open up the passwords.zip file to gather all my passwords.

Erwin 06-21-2005 10:20 PM

Quote:

Originally Posted by Rick Sample
I've been receiving these e-mails which mean nothing to me:

Dear user bullittmustang,

You have successfully updated the password of your Neo account.

If you did not authorize this change or if you need assistance with your account, please contact Neo customer service at: administrator@neo.rr.com

Thank you for using Neo!
The Neo Support Team

_______________________________

But today I recieved this e-mail:
Dear user rick,

You have successfully updated the password of your Muscle-mustangs account.

If you did not authorize this change or if you need assistance with your account, please contact Muscle-mustangs customer service at: administrator@muscle-mustangs.com

Thank you for using Muscle-mustangs!
The Muscle-mustangs Support Team



Then in the From field, it says: Administrator@Muscle-Mutangs.com

I'm not sure how they new my name either. I don't use it for my accounts, e-mail addresses, passwords, etc. Attached is a zipped file called Passwords.Zip. Which I'm sure is a virus.

Someone's sending you a worm or trojan. Delete the attachment.

Marco van Herwaarden 06-22-2005 04:16 AM

Since it looks like you are getting mails from domains that are known by you (by your PC), you are probably already infected by some worm. These mails look to me not to be the start of a problem, but the result.

I would check your pc very good, and change all your passwords from a clean pc.

N8 06-22-2005 04:19 AM

This sounds like someone has your email password (or possibly your forum password...), and they are going to the forums that you hang out at and clicking the "forgot my password" button to get your pass.

I'd just change all of my passwords on everything, and do a spyware / virus check.

(ctrl alt del - and check if there is anything strange running in your memory)

Regs 06-22-2005 04:39 AM

Quote:

Originally Posted by MarcoH64
Since it looks like you are getting mails from domains that are known by you (by your PC), you are probably already infected by some worm. These mails look to me not to be the start of a problem, but the result.

I would check your pc very good, and change all your passwords from a clean pc.

Wrong.

It is an email spam/scam happening, more than likely by a virus/worm that has infected someone's computer with his address in their address book. Several sites on the server I admin are going through the same thing. The spoofed email addies that I can remember are stuff like:

webmaster
administrator
admin
service
info
support
register

Marco van Herwaarden 06-22-2005 04:41 AM

True, it can also be someone elses PC that is infected.

GsxrTony 06-22-2005 04:43 AM

Quote:

Originally Posted by Regs
Wrong.

It is an email spam/scam happening, more than likely by a virus/worm that has infected someone's computer with his address in their address book. Several sites on the server I admin are going through the same thing. The spoofed email addies that I can remember are stuff like:

webmaster
administrator
admin
service
info
support
register

Yup, I get this all the time.

zendiz 06-22-2005 09:26 AM

Yep experienced the same thing, and is it coincidence but after disabling users email function, it stopped. ???


All times are GMT. The time now is 12:06 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01221 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (4)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete