Go Back   vb.org Archive > Community Central > Community Lounge
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 06-21-2005, 09:42 PM
Rick Sample Rick Sample is offline
 
Join Date: Apr 2004
Location: Ohio
Posts: 407
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Am I being hacked??????

I've been receiving these e-mails which mean nothing to me:

Dear user bullittmustang,

You have successfully updated the password of your Neo account.

If you did not authorize this change or if you need assistance with your account, please contact Neo customer service at: administrator@neo.rr.com

Thank you for using Neo!
The Neo Support Team

_______________________________

But today I recieved this e-mail:
Dear user rick,

You have successfully updated the password of your Muscle-mustangs account.

If you did not authorize this change or if you need assistance with your account, please contact Muscle-mustangs customer service at: administrator@muscle-mustangs.com

Thank you for using Muscle-mustangs!
The Muscle-mustangs Support Team



Then in the From field, it says: Administrator@Muscle-Mutangs.com

I'm not sure how they new my name either. I don't use it for my accounts, e-mail addresses, passwords, etc. Attached is a zipped file called Passwords.Zip. Which I'm sure is a virus.
Reply With Quote
  #2  
Old 06-21-2005, 09:52 PM
Guest190829
Guest
 
Posts: n/a
Default

Are you members of the forums? If you didn't recently change your password then something is up. E-mail the administrator to see what the problem is. Also, I would change all your passwords just to be on the safe side.
Reply With Quote
  #3  
Old 06-21-2005, 09:58 PM
Rick Sample Rick Sample is offline
 
Join Date: Apr 2004
Location: Ohio
Posts: 407
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Danny.VBT
Are you members of the forums? If you didn't recently change your password then something is up. E-mail the administrator to see what the problem is. Also, I would change all your passwords just to be on the safe side.

I'm actually one of the owners, but we don't have any e-mal accounts that are Administrator@muscle-Mustangs.com. A matter of fact, we don't have any e-mail accounts set up.


I'm not sure if someone actually hacked my site or if they are just pretending like they did to get me to open up the passwords.zip file to gather all my passwords.
Reply With Quote
  #4  
Old 06-21-2005, 10:20 PM
Erwin's Avatar
Erwin Erwin is offline
 
Join Date: Jan 2002
Posts: 7,604
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Rick Sample
I've been receiving these e-mails which mean nothing to me:

Dear user bullittmustang,

You have successfully updated the password of your Neo account.

If you did not authorize this change or if you need assistance with your account, please contact Neo customer service at: administrator@neo.rr.com

Thank you for using Neo!
The Neo Support Team

_______________________________

But today I recieved this e-mail:
Dear user rick,

You have successfully updated the password of your Muscle-mustangs account.

If you did not authorize this change or if you need assistance with your account, please contact Muscle-mustangs customer service at: administrator@muscle-mustangs.com

Thank you for using Muscle-mustangs!
The Muscle-mustangs Support Team



Then in the From field, it says: Administrator@Muscle-Mutangs.com

I'm not sure how they new my name either. I don't use it for my accounts, e-mail addresses, passwords, etc. Attached is a zipped file called Passwords.Zip. Which I'm sure is a virus.
Someone's sending you a worm or trojan. Delete the attachment.
Reply With Quote
  #5  
Old 06-22-2005, 04:16 AM
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Posts: 25,415
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Since it looks like you are getting mails from domains that are known by you (by your PC), you are probably already infected by some worm. These mails look to me not to be the start of a problem, but the result.

I would check your pc very good, and change all your passwords from a clean pc.
Reply With Quote
  #6  
Old 06-22-2005, 04:19 AM
N8's Avatar
N8 N8 is offline
 
Join Date: Dec 2004
Posts: 146
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

This sounds like someone has your email password (or possibly your forum password...), and they are going to the forums that you hang out at and clicking the "forgot my password" button to get your pass.

I'd just change all of my passwords on everything, and do a spyware / virus check.

(ctrl alt del - and check if there is anything strange running in your memory)
Reply With Quote
  #7  
Old 06-22-2005, 04:39 AM
Regs Regs is offline
 
Join Date: Oct 2001
Location: Vancouver BC
Posts: 322
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by MarcoH64
Since it looks like you are getting mails from domains that are known by you (by your PC), you are probably already infected by some worm. These mails look to me not to be the start of a problem, but the result.

I would check your pc very good, and change all your passwords from a clean pc.
Wrong.

It is an email spam/scam happening, more than likely by a virus/worm that has infected someone's computer with his address in their address book. Several sites on the server I admin are going through the same thing. The spoofed email addies that I can remember are stuff like:

webmaster
administrator
admin
service
info
support
register
Reply With Quote
  #8  
Old 06-22-2005, 04:41 AM
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Posts: 25,415
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

True, it can also be someone elses PC that is infected.
Reply With Quote
  #9  
Old 06-22-2005, 04:43 AM
GsxrTony GsxrTony is offline
 
Join Date: Apr 2002
Posts: 36
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Regs
Wrong.

It is an email spam/scam happening, more than likely by a virus/worm that has infected someone's computer with his address in their address book. Several sites on the server I admin are going through the same thing. The spoofed email addies that I can remember are stuff like:

webmaster
administrator
admin
service
info
support
register
Yup, I get this all the time.
Reply With Quote
  #10  
Old 06-22-2005, 09:26 AM
zendiz zendiz is offline
 
Join Date: Jan 2005
Posts: 5
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Yep experienced the same thing, and is it coincidence but after disabling users email function, it stopped. ???
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 09:37 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.06510 seconds
  • Memory Usage 2,252KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (4)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (9)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete