Fake pm from disco directory.

[spin mobile disco]

Just had the following sent to my email address NOT my pm in this forum.

DO NOT REPLY TO THIS EMAIL!*************************** Dear spin mobile disco, You have received a new private message at Mobile Disco Directory Forum from Anglicanjm, entitled "Hey!". To read the original version, respond to, or delete this message, you must log in here:http://www.mobilediscodirectory.co.uk/forums/private.php This is the message that was sent:***************No a bit of joke, but this rocks http://:Censored::Censored::Censored::Censored::Censored::Censored::Censored::Censored::Censored::Censored::Censored:.com/h23.html*************** Again, please do not reply to this email. You must go to the following page to reply to this private message:http://www.mobilediscodirectory.co.uk/forums/private.php All the best,Mobile Disco Directory Forum



I didnt recieve any pm's in my inbox and I asume the link is dangerous so please do not click. Please delete if you recieve it.

[rob1963]

Thanks for the warning Spin.

:thumbsup:

[Shaun]

Looks like Callum's sorted him out. I've also put measures in place to make sure this kind of spamming doesn't happen again.

[rob1963]

Looks like Callum's sorted him out. I've also put measures in place to make sure this kind of spamming doesn't happen again.

Respect!

:beerchug:

[Tony Scott]

Yeah I just got it, didn't click the link thankfully....how does this happen? :confused:

[Shaun]

Yeah I just got it, didn't click the link thankfully....how does this happen? :confused:

To combat spam attacks, all new members posts on the forum are placed in a moderation queue, which means they have to be manually approved by a moderator before they go 'live'. This is usually only for a short time till we approve their account. This cannot be applied to the PM system though, which gave them a loophole for spamming.

I've now removed new members PM permissions till their account is approved. That should put a stop to any further spam messages.

[DeckstarDeluxe]

Wasnt the proplem however the message was sent directly to someones email address not their pm inbox?

[Shaun]

Ah, I see. I completely misread the original post.

Spin, can you PM me the email address of the sender.


**Could Everyone Please Note**

Any emails sent from the admins will have a mobilediscodirectory email address. ([email protected] or [email protected])

If you receive anything else please be wary, and please inform us. Thank you.

[Solitaire Events Ltd]

Wasnt the proplem however the message was sent directly to someones email address not their pm inbox?

No. There is a setting in your control panel, where you can let the forum advise you by email when a PM arrives in your inbox.

[Solitaire Events Ltd]

Ah, I see. I completely misread the original post.



No you didn't. :)

[Shaun]

No you didn't. :)

You sure it's the automated email he's talking about? He says there was no PM.

Maybe someone farming members email details from the forum and sending them an email made to look like it's our automation one?

[Solitaire Events Ltd]

You sure it's the automated email he's talking about? He says there was no PM.

Maybe someone farming members email details from the forum and sending them an email made to look like it's our automation one?

OK, maybe I misread it too then...:o

[Vectis]

I got a 'proper' PM as well as an email.

[DeckstarDeluxe]

No. There is a setting in your control panel, where you can let the forum advise you by email when a PM arrives in your inbox.

the op states that he only received a message to his email address not his pm inbox on the site therefore if he has not received a pm on this site there would be no need for the automatic email sent to his email address?

[Shaun]

Just when I thought I had it figured...Martin throws a 'spanner in the works'. :d

The plot thickens.

To be continued... :)

[Vectis]

Just when I thought I had it figured...Martin throws a 'spanner in the works'. :d

The plot thickens.

To be continued... :)

Sorry :o

Proofski...

[Shaun]

Yep, That's a genuine notification from the forum, so would have a corresponding PM in the recipients PM box. I'm baffled as to why Spin didn't have a Private Message though.

The measures I've put in place should put a stop to this kind of garbage getting through.

[DeckstarDeluxe]

can you not check the offending persons account on their sent messages?

[Solitaire Events Ltd]

can you not check the offending persons account on their sent messages?

We can't look at people's PMs, no.

[Bouncy Dancefloor]

i would presume the moderators deleted the PM's when all this was discovered?

[Shaun]

i would presume the moderators deleted the PM's when all this was discovered?
We can't delete PM's. This can only be done by the user.

[Marc J]

Just because "[email protected]" is in the email's from field, doesn't mean that's where it came from. Email from addresses can be faked - called "spoofing". You need to look closely at the message source to see where it's actually from.

That's what happens when you get a notification that spam you appear to have sent has bounced - the spammer has simply chosen to use your email address in the "from" and "reply to" fields so you get all the bounces.

[Vectis]

Just because "[email protected]" is in the email's from field, doesn't mean that's where it came from. Email from addresses can be faked - called "spoofing". You need to look closely at the message source to see where it's actually from.

That's what happens when you get a notification that spam you appear to have sent has bounced - the spammer has simply chosen to use your email address in the "from" and "reply to" fields so you get all the bounces.

Good advice Marc.

But my point was that I did also receive a PM at the same time, therefore there's a very strong probability that the email message was forum-generated.

[Marc J]

But my point was that I did also receive a PM at the same time, therefore there's a very strong probability that the email message was forum-generated.

I know, I guess my post was a little off-topic -more of a "heads-up" to take email from fields with a pinch of salt generally.

[mikeee]

Well, I just googled the http, and the result is pages of comments on forums either about posts or PMs. The web site origin appears to be Thai. It looks if someone has found a "crack" in forum software.

[spin mobile disco]

No I can confirm I didnt actually have a p.m in my inbox but just the email. I assumed it was some form of spam using a bot. have no idea why i didnt get a p.m as well.

[Tony Scott]

Me too....I got an email telling me i had a PM but when I checked on my forum inbox there was no PM?

[Corabar Steve]

I'm thinking that maybe the spammer tried to send too many PMs & only the first few got through, but the auto email went out for all of those with the option checked.

[PropellerHeadCase]

...or, can a PM be retracted once sent, the way you can with a post?

[Corabar Steve]

No.

[Shaun]

The only other thing I can think of is the recently implemented "one touch ban & clean" system.

If Callum removed the spammer using that method, apparently it would automatically remove any PM's the spammer had sent. That would explain things.

Callum?

[Jiggles]

Yes thats what i used seeing as the spam was by PM so would be easyer.

[DazzyD]

Good to see the admin team are on the ball to get this sort of thing stamped out quickly.

I tried the forum software (e-Blah) that came with my hosting package and was amazed how quickly some threads were filled up with spam. This was just during the testing stage so I had to prevent posts from anyone who wasn't confirmed on the system. Easy to fix but a pain in the backside!

[Shaun]

Yes thats what i used seeing as the spam was by PM so would be easyer.

Mystery solved. :)

Cheers Callum.

[Jiggles]

Should of told you all :o Sorry.

[Shaun]

Nothing to apologise for. You did your job and did it well. :beer1:

[Jiggles]

Fair enough! :D