I would like to stress just how important it is that everyone NOT
react to these ticket messages by visiting the website and
especially not logging in or doing anything else. We have no
idea what this is or what they are after, and anything you
provide them with could be used against you in spam attacks or
other forms of "attac" that have become so prevalent in today's
computer world. I do not claim to know what this site is, what
they do, or why they are pulling this stunt, but I do know that
we should all ignore it completely until it is all figured out.
I am not trying to scare anyone, but I remember that a few years
ago I tried to sign up for a contest with a site I had never
heard of before. Until then I did not get any spam or junk mail,
but after that "contest" I started getting lots of it.
Have a great day,
Alex
----- Original Message -----
From: "Joseph Lee" <[EMAIL PROTECTED]
To: <[email protected]
Date sent: Sun, 10 Aug 2008 19:26:11 -0700
Subject: [Braillenote] Few results of my investigation into
Conkurent thread
Hi folks,
I did some investigation abou this whole "Conkurent" thread and
came up with
few results. Techniques included browsing list archive, pinging
the
offending IP address and doing some Google searches. Here's what
I found:
* The offending IP address is 209.62.115.138 (this is the IP
address of the
website).
* The ticketnotifications were timestamped using UTC+3 timezone.
*Under My Account link, it shows my email address along with my
full name.
I hate to say this, but I guess that we have encountered yet
another spoofer
- hiding the real address and posting a reply as though it comes
from a PHP
development company. We had this kind of incident already - so
it is that
type of scenario again.
A few things:
* Did someone subscribe to this list around end of July to first
weekend of
August (Aug. 1 through 3)? If so, this might be the person
(apart from
people who we already heard from) who might be behind this spam.
* If a person's email and his or her full name is listed under My
Account
(under Conkurent website), then it is likely that we have a
person who
hijacks email addresses and spoofs them so that this person
cannot be caught
easily.
* Also, you might have noticed that the posts from this address
contains the
person's password to the Conkurent account. This suggests that,
whenever a
person submits a post to the BrailleNote List address, the email
address in
question (the sender's address) would be added automatically to
the Support
ticket system.
* Another thing to note is that the email post specifies a web
link that
"directs" readers to click, which does show the ticket
information. This
resulting website prompts users to log in by typing their email
addresses
and passwords. This is a potential fishing mechanism - fishing
is a way to
"fool" users via email in order to collect sensitive, personal
information.
That's all I have - sorry, no solution except ignoring these
ticket posts.
Cheers,
Joseph
No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.526 / Virus Database: 270.6.0/1602 - Release Date:
8/9/2008
1:22 PM
___
Replies to this message will go directly to the sender.
If your reply would be useful to the list, please send a
copy to the list as well.
To leave the BrailleNote list, send a blank message to
[EMAIL PROTECTED]
To view the list archives or change your preferences, visit
http://list.humanware.com/mailman/listinfo/braillenote
___
Replies to this message will go directly to the sender.
If your reply would be useful to the list, please send a
copy to the list as well.
To leave the BrailleNote list, send a blank message to
[EMAIL PROTECTED]
To view the list archives or change your preferences, visit
http://list.humanware.com/mailman/listinfo/braillenote
