Spam from the beyond

[dominique]

I was SHOCKED today by receiving spam from Ted Loh's address.

This is the spam:

My dear Madam:
http: //menanes.com/folder/ homehere.html?jqisubid=2



Wed, 21 Dec 2011 21:39:22

It also listed some other recipients - and I recognized some of the names.


This really makes me mad!

 

[swampwitch]

Don't you just love it when hackers don't bother to do their homework before they use someone's email account and contact list?
The only stuff I could find about menanes.com is they're some kind of trading company, specializing in scrap metal and olive oil. And being dicks.


Slight derail...
My husband passed away in December of last year. I hadn't even thought about cancelling his email account...untill the spam started. It took months to get the account cancelled, and in the meantime I received a total of 4 spam emails from "him". One was for the Hoveround (I'n not that damned old), one was for steel quonset huts (?!), one for discount Canadian Viagra....and the last one was for a...wait for it....dating site for widows. I kid you not.
The cretins who used his account for spam will burn in a very special hell. However, I have to admit that I cracked up every time it happened, especially the dating site one, because it's the kind of thing Duane would have done if he were trying to haunt me. Well, maybe not the quonset hut. I'll never understand that one.

 

[Pinababy69]

I got one also...not sure if it was the same as Dom's. But I was pissed and sad, and upset. Nuff said.

EDIT: I went and dug it up and no, it's different content than Dom's. I wonder if Bryan could look into it? I don't even know if it's casino spam, or wtf it is. Totally classless is all I know.

From: ted loh
Sent: Wednesday, December 21, 2011 3:39 PM
To: [email protected] ; [email protected] ; [email protected] ; [email protected] ; [email protected] ; [email protected]
Subject: danzsing4eva

Dear Colleague,
httpx://193.227.216.5/folder/homehere.html?awytprof=17



Wed, 21 Dec 2011 21:39:24
______________

And as Dom mentioned, definitely some valid email addies in there.......specifically one I know for sure as an affy manager. I've xx'd them out so they don't get picked up.

Weird thing is that my Facebook account got hacked yesterday, and I went thru a ton of shit to get it reinstated. Apparently it was someone from Taiwan, Taipei who accessed it. Don't know why in God's name they'd want my FB..but they're welcome to it, and my identity if they want it, lol. Afraid I'm not worth two plug nickels, lol.

 

[P.V.]

I was SHOCKED today by receiving spam from Ted Loh's address.

This is the spam:

My dear Madam:
http: //menanes.com/folder/ homehere.html?jqisubid=2



Wed, 21 Dec 2011 21:39:22

It also listed some other recipients - and I recognized some of the names.


This really makes me mad!

There seems to be a influx of email crap going on. Remember email servers are different than the website hosting servers, so.. look what happens.

Here's a couple interesting links to read:

You do not have permission to view link Log in or register now.

You do not have permission to view link Log in or register now.

I'd also suggest that webmaster change their passwords from time to time to stop bots etc. from gaining access to your email.

As I've said may times email isn't secure!

 

[vinylweatherman]

I am a bit puzzled how they did it.

The BBC covered email hacking a short while ago, and it showed (broadly) how it was done, and how easy it was. The problem is that in order to hack an email account, the owner has to be using it. Methods vary from keyloggers on the PC to sniffing traffic on public WiFi (easy, and VERY sneaky since it matters not how secure the password is) and piggy backing a looged in email session, taking it over when the owner disconnects.

It could also be a hack of the email provider itself, and this is one of a number of email addresses that have been hacked and used for spamming.

It could even be a spoofed from address, maybe Ted's by coincidence, with recipient's own client marking it as "from Ted Loh" because they have him as a contact in their address book.

It's not the usual spam, a "dear college" followed by nothing more than a URL. Looks more like a malware attack.

Why only "dear collegue" if they have access to Ted's contact list? If addressed by name, his contacts would, under normal circumstances assumed by such hackers, be much more likely to click on the link.

A "dear college" attack is normally distributed widely, with no assumption that the recipient knows the sender.