Phishing attempt at Linux.com
Hi Folks,
I'm not sure where to post this but I figure here is as good a place as any. If the moderators need to move it thats OK with me.
So here's the problem. I joined the Linux.com community on May 17. I made it a point to leave the contacts fields in the enrollment
form blank, further I made sure only friends could view my profile
but the radio button to allow messages from Linus.com is checked yes.
Today I received a message at the email account that is supposed to be known only to Linux.com.
It was from an Elizabeth and appeared to be a friend invitation.
It was however a "phishing" attempt
The text of the message is posted below.
Dear Friend, I know that this is an unusual platform for us to be discussing this Kind of business but the situation has necessitated me to use this Medium to communicate you for now. But let me introduce myself to you. I am Miss. Elizabeth Mark, the manager of bill and exchange at the foreign remittance department of my Bank. In my department I discovered an abandoned sum of US$14.5M, (Fourteen Million, and Five Hundred Thousand US Dollars) at our head office Accra Ghana, that belongs to one of our foreign customers, who died along with his wife and only son in a plane crash of Alaska Airlines Flight number 261 which crashed on 31 January, 2000. The owner of this account is Mr. Morris Thompson an American and great industrialist and a resident of Alaska. It is therefore upon this discovery that I now decided to make this Business proposal to you and for our bank to release the money to You, for more detail send me an email in my private email address( e.mark11@yahoo.xxx or elizamark@lycos.xxx ) Yours truly, Miss. Elizabeth Mark.
I deliberately changed the .com of the email addresses in the body of the message to prevent someone here from accidentally clicking on these links and getting into some sort of trouble. Please don't click these email links.
Furthermore on the 17 th I received more spam messages at this mail account than I normally receive in a week. I sometimes go quite awhile before seeing spam at this account.
This spam issue may be a coincidence but the "phishing" message is very real.
My guess is that some lowlife has "hacked" Linux.com.
Has anyone else experienced this invasion of privacy.
Thanks.
Comments
-
I have noticed that if you have an RSS subscription to the Linux.com blogs, every blog comes over with the author's e-mail address. That is most likely were they got your email from.0
-
Nope, no RSS subscriptions for me, I don't like RSS so I don't use it. If I want to read a blog I do it manually.
I don't blog either.
This is a serious issue and I hope we can get it fixed.0 -
Were these messages sent from Linux.com as friend requests? I so I would recommend sending a message to Brian Profitt reporting g the spammer.0
-
This would probably be the second attack against high-profile Linux websites recently. First was Debian Forums, and now here.
Definitely worth reporting to the admins.
Nice catch.0 -
Yep, I reported this to Brian about 10-12 hours ago.
Unfortunately I deleted the email without thinking so I can't provide headers etc., just the body of the message.
This was in my inbox as coming from Linux.com as a friend
invite from Elizabeth.
I opened it without thinking, assuming it was from a legitimate member. I opened it in Thunderbird on my Win 7 install.
Gee, I hope I haven't infected my Windows machine with some nasty.:laugh:
Seriously I will run a virus scan to be sure.0 -
All friend requests are send as text from linux.com, you don't have to worry about any bugs, that is unless they are masking their email server as linux.com.0
-
Thanks for posting this, Frank. If it is an issue, others will pop in and post here, I'm sure.
On a probably unrelated note: The Linux.com server has BEEN SLOW AS MOLASSES this evening from the Tampa area. I bypassed my local DNS by using their IP (140.211.167.55) and it was still slow as hell. I wonder what's up with that.
Hey mfillpot, this is why I accidently double-posted on the Slackware Linux Users group earlier. I felt like I was on dial-up again.
Anywho... :side:0 -
I'm not feeling the delay, have you ran trace route to determine the point of lag?0
-
No. I didn't. It seems to be all better now, anyway. Probably just a local node that was slowing things up.
Hmm... a drop out at nero.net (node 25). This is Linux.com's nameserver at Oregon State U. *scratching head*0 -
Brian is aware of this issue and has banned the account in question. He is also searching for anti spam solutions to prevent this from happening again.:)0
-
COOL! So it wasn't just your imagination. I still wonder how they got your email addy?0
-
Actually it sounds like they sent spam through a friend request and did not actually get the email address.0
-
just been spammed as well, shame that i have already sent all my money to an uncle i did not know i had in Nigeria, linux spammed come on we can't have that!0
-
We are aware of these attempts. We're implementing some fixes to the system to prevent, but for now, e-mail webteam@linux.com anytime you get these things, and try to ID the user so we can kick them off immediately. There will be zero-tolerance of spamming, via forums, e-mails, and DMs.
BKP0 -
It won't be long before there will be posts directing us to cheap Nike gear from a Chinese website. That's what continues to happen on the interactive fiction usenet group.0
-
Hi just a quick note to say I got the same message today form the user with the id 45760
Categories
- All Categories
- 207 LFX Mentorship
- 207 LFX Mentorship: Linux Kernel
- 734 Linux Foundation IT Professional Programs
- 339 Cloud Engineer IT Professional Program
- 166 Advanced Cloud Engineer IT Professional Program
- 66 DevOps Engineer IT Professional Program
- 132 Cloud Native Developer IT Professional Program
- 122 Express Training Courses
- 122 Express Courses - Discussion Forum
- 6K Training Courses
- 40 LFC110 Class Forum - Discontinued
- 66 LFC131 Class Forum
- 39 LFD102 Class Forum
- 222 LFD103 Class Forum
- 17 LFD110 Class Forum
- 34 LFD121 Class Forum
- 17 LFD133 Class Forum
- 6 LFD134 Class Forum
- 17 LFD137 Class Forum
- 70 LFD201 Class Forum
- 3 LFD210 Class Forum
- 2 LFD210-CN Class Forum
- 2 LFD213 Class Forum - Discontinued
- 128 LFD232 Class Forum - Discontinued
- 1 LFD233 Class Forum
- 3 LFD237 Class Forum
- 23 LFD254 Class Forum
- 689 LFD259 Class Forum
- 110 LFD272 Class Forum
- 3 LFD272-JP クラス フォーラム
- 10 LFD273 Class Forum
- 112 LFS101 Class Forum
- LFS111 Class Forum
- 2 LFS112 Class Forum
- 1 LFS116 Class Forum
- 3 LFS118 Class Forum
- 3 LFS142 Class Forum
- 3 LFS144 Class Forum
- 3 LFS145 Class Forum
- 1 LFS146 Class Forum
- 2 LFS147 Class Forum
- 8 LFS151 Class Forum
- 1 LFS157 Class Forum
- 18 LFS158 Class Forum
- 5 LFS162 Class Forum
- 1 LFS166 Class Forum
- 3 LFS167 Class Forum
- 1 LFS170 Class Forum
- 1 LFS171 Class Forum
- 2 LFS178 Class Forum
- 2 LFS180 Class Forum
- 1 LFS182 Class Forum
- 4 LFS183 Class Forum
- 30 LFS200 Class Forum
- 737 LFS201 Class Forum - Discontinued
- 2 LFS201-JP クラス フォーラム
- 17 LFS203 Class Forum
- 118 LFS207 Class Forum
- 1 LFS207-DE-Klassenforum
- LFS207-JP クラス フォーラム
- 301 LFS211 Class Forum
- 55 LFS216 Class Forum
- 50 LFS241 Class Forum
- 44 LFS242 Class Forum
- 37 LFS243 Class Forum
- 13 LFS244 Class Forum
- 1 LFS245 Class Forum
- 45 LFS250 Class Forum
- 1 LFS250-JP クラス フォーラム
- LFS251 Class Forum
- 146 LFS253 Class Forum
- LFS254 Class Forum
- LFS255 Class Forum
- 6 LFS256 Class Forum
- LFS257 Class Forum
- 1.2K LFS258 Class Forum
- 9 LFS258-JP クラス フォーラム
- 116 LFS260 Class Forum
- 156 LFS261 Class Forum
- 41 LFS262 Class Forum
- 82 LFS263 Class Forum - Discontinued
- 15 LFS264 Class Forum - Discontinued
- 11 LFS266 Class Forum - Discontinued
- 23 LFS267 Class Forum
- 18 LFS268 Class Forum
- 29 LFS269 Class Forum
- 200 LFS272 Class Forum
- 1 LFS272-JP クラス フォーラム
- LFS274 Class Forum
- 3 LFS281 Class Forum
- 8 LFW111 Class Forum
- 257 LFW211 Class Forum
- 180 LFW212 Class Forum
- 12 SKF100 Class Forum
- SKF200 Class Forum
- SKF201 Class Forum
- 791 Hardware
- 199 Drivers
- 68 I/O Devices
- 37 Monitors
- 98 Multimedia
- 174 Networking
- 91 Printers & Scanners
- 85 Storage
- 754 Linux Distributions
- 82 Debian
- 67 Fedora
- 16 Linux Mint
- 13 Mageia
- 23 openSUSE
- 147 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 351 Ubuntu
- 465 Linux System Administration
- 39 Cloud Computing
- 71 Command Line/Scripting
- Github systems admin projects
- 91 Linux Security
- 78 Network Management
- 101 System Management
- 47 Web Management
- 56 Mobile Computing
- 17 Android
- 28 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 366 Off Topic
- 114 Introductions
- 171 Small Talk
- 20 Study Material
- 534 Programming and Development
- 293 Kernel Development
- 223 Software Development
- 1.2K Software
- 212 Applications
- 182 Command Line
- 3 Compiling/Installing
- 405 Games
- 312 Installation
- 79 All In Program
- 79 All In Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)