Private message spam

scanmaster_k · Post by **scanmaster_k** » Fri Apr 11, 2008 1:23 pm

Hi, just received this spam as a private message from a Johny.

Hello scanmaster_k!

View Click and Make Money Online with Bux.to - Get paid to click on ads Bux.to allows you to earn much money doing basically nothing. You can earn by two ways, one is to click on advertisements and earn money manually. Second one is to earn money with your referrals. I have seen many proofs that users earns more than $1000 referring others to join this great service. You can see proof on below picture, if you dont believe me. Of course, you can join and use service completely for free, you will not loose anything but little time spent on registration process.

You can request for payment once youre account balance is at least $10.00. Your payment will be processed and issued via AlertPay or Bux.to card within 30 business days for premium and 60 business days for standard members. You can only request one payment at the time. Right now they only supports these two (above mentioned) payment systems.

View Click and Make Money Online with Bux.to - Get paid to click on ads

Bux.to works on simple process. You view websites in 30 second sessions via the "Surf Ads" page. Once the 30 seconds is up, youll either get a green tick sign or a red X. The green tick sign means youve earned $0.01 and as premium member $0.0125 for the visit and the X means you have not earned money for the visit. Youll get red Xs when you have more than one website from the "Surf Ads" page open. When this happens, you get no credit.
One good thing for webmasters is that they can convert their earnings to advertise on Bux.to website and get some quality visitors completely for free. In other way you can easily cashout your account balance and take money. This is great way to earn money easily on internet, specially if you can attract referrals through your link. You can see live example on above account details.

Just thought I would let someone know, in case it can be blocked or something.

Scanmaster_K

Post by **haffax** » Fri Apr 11, 2008 1:34 pm

Hmm, I have just disabled PM for a user named kakahehe. I'll see to it.

triton · Post by **triton** » Fri Apr 11, 2008 1:36 pm

I also received one from maniek.

Post by **haffax** » Fri Apr 11, 2008 1:37 pm

Johny and maniek blocked too. This problem will be discussed. Anymore people having problems with this from other users?

Post by **sinbad** » Fri Apr 11, 2008 2:21 pm

Lots of people are reporting these, so far reported:

orzeszek
Johny
maniek
kakahehe

All are from Poland by the looks of it. I've removed all their accounts and am banning the Polish freemail providers they were using. Looks like Poland is now the new Russia for spammer-friendly email providers.

Any more, please post in this thread rather than PM'ing me

anupamsr · Post by **anupamsr** » Fri Apr 11, 2008 3:17 pm

Code: Select all

From: sinbad@ogre3d.org
To: HEY_THAT'S_MY_EMAIL_ADDRESS! :)@gmail.com
Subject: New Private Message has arrived
Date: Fri, 11 Apr 2008 12:53:06 +0100
Reply-to: sinbad@ogre3d.org
X-Mailer: PHP
X-MimeOLE: Produced By phpBB2

Hello anupamsr,

You have received a new private message to your account on "Ogre Forums" and you have requested that you be notified on this event. You can view your new message by clicking on the following link:

http://www.ogre3d.org/phpBB2/privmsg.php?folder=inbox

Remember that you can always choose not to be notified of new messages by changing the appropriate setting in your profile.

-- 
Thanks, The Management

anupamsr · Post by **anupamsr** » Fri Apr 11, 2008 3:20 pm

I should add that I received a similar PM message on another forum yesterday... I think they use IPB.

I wonder if this is new PHP vulnerability.

incidenta5 · Post by **incidenta5** » Fri Apr 11, 2008 5:13 pm

Ditto, please ban this guy.

Post by **sinbad** » Fri Apr 11, 2008 6:21 pm

incidenta5 wrote:Ditto, please ban this guy.

The posts above don't identify a user - if you have had any spam posts from anyone else not in that list, tell me what their account name is. The notification email doesn't say.

And please, no-one else PM or email me about spam or missing messages when you go to your inbox (they're gone because the user is gone)

nabasu · Post by **nabasu** » Fri Apr 11, 2008 6:24 pm

Thanks for taking time to answer.

vgx · Post by **vgx** » Fri Apr 11, 2008 11:42 pm

Hmm, another bux.to PM spam from user kamila12 ...

Caius · Post by **Caius** » Fri Apr 11, 2008 11:49 pm

received that spam from inotal

Post by **sinbad** » Sat Apr 12, 2008 12:34 am

More bannings:

inotal
kamila12

Please don't PM / email me about this, use this thread, I'm getting secondary spam here

billrobertson42 · Post by **billrobertson42** » Sat Apr 12, 2008 12:36 am

From kamila12

kamila12 wrote:Hello billrobertson42!
SPAM SPAM SPAM

haffax: edited message so to not link to the spam site.

Post by **sinbad** » Sat Apr 12, 2008 12:41 am

Already banned.

frooze · Post by **frooze** » Sat Apr 12, 2008 1:34 am

i think banning those users won't do much since it might be auto-generated due to some security hole in phpBB2?

Mr.Garibaldi · Post by **Mr.Garibaldi** » Sat Apr 12, 2008 9:04 am

sinbad wrote:More bannings:

inotal
kamila12

Please don't PM / email me about this, use this thread, I'm getting secondary spam here

Sorry for spamming you, and thank you for banning inotal

frooze, it can't hurt banning them, so they don't have any accounts they can fall back to when the exploit has been fixed...

Post by **betajaen** » Sat Apr 12, 2008 10:20 am

Couldn't there be some sort of plugin to forbid PMing other users with their post count below 10? Sure it would hurt the legit people but would stop all of the spammers.

Dutchie · Post by **Dutchie** » Sat Apr 12, 2008 10:47 am

mailmy

he did it to me...

DarkCoder2 · Post by **DarkCoder2** » Sat Apr 12, 2008 6:08 pm

Hey all,

your problem is that either your domain has found itself on a white list or been crawled from a search engine by a spam bot.
The purpose of PM spam is that it takes admins a lot longer to identify there is a spam problem in most cases.

These bots get about 300k new domains a day parsed from multiple search engines, using a proxy network of about the same size, it's one heck of a problem for google.
Hence the over reactive at times spam page.
But not only that there are white lists of new forums released on many site's, some show 1 Million new forums a week.

The problem is in the maths, if you can get about $1 CPM (Per 1000) Banner add's, or from CPC.
And with some tricks and the right ad provider thats fairly low.

Spamming 1000,000 forums in a month that generate just 10 unique hits nets you $10,000, nice huh?

And there are many porn & other affiliates they use to generate there money too.
Of course, they use a number of methods to stop the ad providers knowing where the traffic is coming from, such as making you redirect on the main sites or a middleman site, erasing the refferer your browser passes..

If the ad company's check the page out, it looks like a normal refferal page, but from the spam link they get something else.

It's all down to numbers, an average of 10% reply to phishing emails for passwords and bank information.
Around 60% of people are said to click a spam link via a forum PM, email or spam post rather than ignore it.

It's big money for an automated process, and to many people can't resist it.
The captcha you have atm is easy, the background is lighter and letters can be picked out with no problems at all.
But even if it wasn't, its a plain unmodified font, and even if it was like some captchas, a neural network could still read it if a smart person made it.

My advice, and I'm fluent in PHP & html is to play with the registration forum on here.

You can tell a new user to leave some fields blank, and if on submission there not blank, fail the process.
Or rename the user and email fields in the html forum. and if the email field contains an email, it's likely a bot.

But this would only get the automated bot's, and some are trained to spot these tricks, and a person can be notified and pass the forum manually.
Many bot's read the text before a field and know if it differs from default.

A custom question may also go down well, but not a simple maths one, as they have been cracked long ago.

I would recommend a 10 posts min filter for PM, but then they may start with spam posts of porn etc.

if you need my help just PM me.

Post by **Assaf Raman** » Sat Apr 12, 2008 9:47 pm

I was feeling left out - karabinerka just sent me the Bux.to message. Can you ban him?

gideon · Post by **gideon** » Sat Apr 12, 2008 9:54 pm

Received one from mailmy

ajs15822 · Post by **ajs15822** » Sat Apr 12, 2008 10:29 pm

gideon wrote:Received one from mailmy

ditto

Simon · Post by **Simon** » Sat Apr 12, 2008 11:03 pm

gideon wrote:Received one from mailmy

yep,
received it here as well

SpaceDude · Post by **SpaceDude** » Sat Apr 12, 2008 11:08 pm

mailmy spammed me too... I guess there are a few ways to combat these PM spams:

1) Only allow people with at least X number of posts to send private messages. So if they wanted to do the PM spam they would first need to spam the main boards which would easily be visible to the admins.

2) Some forum software allows users to report private message abuse directly with a button. This makes it easier to deal with them.

Private message spam

Private message spam

I got this