Welcome to the Australian Ford Forums forum.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and inserts advertising. By joining our free community you will have access to post topics, communicate privately with other members, respond to polls, upload content and access many other special features without post based advertising banners. Registration is simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Please Note: All new registrations go through a manual approval queue to keep spammers out. This is checked twice each day so there will be a delay before your registration is activated.

Go Back   Australian Ford Forums > General Topics > Ford Forums Central > Site Support

Site Support If something isn't working or you have a suggestion ( a nice one !! ) let us know here.

Reply
 
Thread Tools Display Modes
Old 08-01-2018, 08:04 PM   #31
Fairlane 5OO
FF.Com.Au Hardcore
 
Fairlane 5OO's Avatar
 
Join Date: Oct 2007
Posts: 619
Default Re: Spammed from BarginsAU

I got spammed as well.
I deleted & blocked the sender.


Plenty of other vbulletin forum members got exactly the same
& there are threads on other forums.

Sounds like there is a hole in the security.
Fairlane 5OO is offline   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old 08-01-2018, 09:41 PM   #32
wodahs
FF.Com.Au Hardcore
 
wodahs's Avatar
 
Join Date: Nov 2005
Location: perth
Posts: 2,855
Default Re: Spammed from BarginsAU

unfortunately even apps on your phone or pc write EVERYTHING that you've had going on back to daddy n mommy
as seems basically facebash gazzoogle n others the like own most apps and scour ALL your info for what ever bolderdash excise they need it for and they have the rights to onforward the info at their needs too
talk bout an invasion of privacy and we invite them in
__________________
yes still (as money n time permit) doing the

rebuilding the zh fairlane with a clevo 400m 4v heads injected whipple blown with aode 4 speed trans to a 9" ....... we'll get there eventually

just remember don't be afraid to try something new.
Remember, amateurs built the Ark...Professionals built the Titanic!
wodahs is offline   Reply With Quote Multi-Quote with this Post
2 users like this post:
Old 08-01-2018, 11:13 PM   #33
WindsorXR
FGII XR6, Focus Sport, XR
 
WindsorXR's Avatar
 
Join Date: Nov 2005
Location: Geelong, Victoria
Posts: 1,682
Default Re: Spammed from BarginsAU

Pretty much.
That's why it's just a case of

- Unsubscribe
- Mark as Spam or Report
- Delete

My yahoo account is packed with spam.
__________________
Living Ford dreams

2011 Purple FGII XR6
2016 LZ Focus Sport

BA XR8 Build Thread (SOLD)
1966 XR Falcon Build Thread
WindsorXR is offline   Reply With Quote Multi-Quote with this Post
Old 09-01-2018, 12:14 AM   #34
Feathers
Lucifer's Angel
 
Feathers's Avatar
 
Join Date: Dec 2004
Location: Sydney
Posts: 3,254
Default Re: Spammed from BarginsAU

Another forum I'm on, had bitcoin mining code inserted into it recently, as they were running an unsupported version of Vbulletin, could something similar have happened here if there is a security flaw in the version being used?
__________________
SINISTER BA XR6
Blueprint, manual, 4490's, Redback 2.5" dual exhaust, BA Typhoon rims, tint, fog light covers, BF tailights, blue illuminated window switches, Ghia bootlid carpet, lower grille, FPV door spears, steering wheel & interior bits, XR6T + F6 intake, K&N filter, Typhoon spoiler, tuned, sway bars, custom angel eyes & plates..YUM!

If there's one thing guys in Holdens hate more than being beaten by a Ford...
It's being beaten by a girl driving a Ford
Feathers is offline   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old 09-01-2018, 09:18 AM   #35
Fed
Donating Member
Donating Member1
 
Join Date: Aug 2016
Posts: 321
Default Re: Spammed from BarginsAU

Quote:
Originally Posted by Blue Shadow View Post
Does the email have the option to unsuscribe ?
There is an unsubscribe on the Bargains AU spam but I don't unsubscribe from a site I never subscribed to in the first place.

They do say that unsubscribing from a dodgy site can be used as confirmation of a valid live email address which is then placed on more lists & passed around like a hooker at a bucks party.

Quote:
Not sure what you mean by they got me? Well they have now that its leaked out!
What I meant PF was that your Ford Forums email address is now on a mailing list that is out in the wild.
Fed is offline   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old 09-01-2018, 04:28 PM   #36
Mercury Bullet
FF.Com.Au Hardcore
 
Join Date: Feb 2008
Location: WA
Posts: 2,351
Default Re: Spammed from BarginsAU

Quote:
Originally Posted by wodahs View Post
unfortunately even apps on your phone or pc write EVERYTHING that you've had going on back to daddy n mommy
as seems basically facebash gazzoogle n others the like own most apps and scour ALL your info for what ever bolderdash excise they need it for and they have the rights to onforward the info at their needs too
talk bout an invasion of privacy and we invite them in
Absolutely and we let the government get away with this lack of legislation.
America is worse though, they know when you visit the dunny. One day the Glen 20 can will go off automatically on cue.
__________________
www.bseries.com.au/mercurybullet

2016 Falcon XR8. Powered by the legend that is - David Winter.
XC Cobra #181.
1985 Mack Superliner, CAT 3408, 24 speed Allison.
Mercury Bullet is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old 13-01-2018, 11:29 PM   #37
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

Hi guys, I also use a unique email address for each website I sign up to

i.e. fordforums_com_au@<mydomainname>.com

I also got the BargainsAU spam.

I signed up so long ago that I didn't even keep a record of signing up or this email address on my end, in fact according to the forum index "You last visited: 12-01-2007 at 02:42 PM"... Almost 11 Year exactly!

And yes, fordforums_com_au@<mydomainname>.com is my actual registered email address on the forum, I was able to complete the password reset using this email address.

So yes, I can say that with 100% certainty that your database has been compromised.
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 13-01-2018, 11:48 PM   #38
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 09:11 AM   #39
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

So did the others spammed have a similar easily guessed email address starting with something like "ford_forums_au@" ?
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old 14-01-2018, 09:31 AM   #40
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

I doubt that convention is easily guessable I think that you need to move to supported forum software receiving security updates and notify of the breach. overclockers.com.au just moved from old VBulletin to XenForo because it's similar, although I'm more a fan of Discourse.
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 09:53 AM   #41
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Quote:
I doubt that convention is easily guessable
I think that is one a spammers expert system would easily guess especially if the same convention was used on another forum or site that had been hacked.
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 10:13 AM   #42
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

Quote:
Originally Posted by aussiblue View Post
I think that is one a spammers expert system would easily guess especially if the same convention was used on another forum or site that had been hacked.
And even though it is a catch-all address (meaning anything@mydomain.com comes through to me and no other BargainsAU spam hit me except this one), and out of all the possible combinations, they chose fordforums_com_au.

This even though it has been 11 years since I last visited and had kept absolutely no record of it.

On top of this, other users on the same forum are reporting that they have received the same spam to other email addresses of a different convention which also has only ever been given out to fordforums.com.au (i.e. a work email address).

This spammer must have a magic crystal ball or something to be able to target users of this specific forum according to the email address on file, unless you guys actually sold your members email addresses to the spammer yourselves?
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 10:20 AM   #43
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Its seems though less than a dozen members have got the spam and you would think many more would have if the site had been hacked. You'd think there must be something else in common of those who got the spam.
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old 14-01-2018, 10:29 AM   #44
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

It went into the spam folder. Most people just delete and move on - it's very hard to attribute where it came from if you use your primary email address. I on the other hand have this system set up so that I check for leaks before blocking that particular address, so I can tell if a particular website has been compromised.
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 10:48 AM   #45
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Perhaps your mail provider was hacked ala Yahoo mail.
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 10:49 AM   #46
Fed
Donating Member
Donating Member1
 
Join Date: Aug 2016
Posts: 321
Default Re: Spammed from BarginsAU

https://www.sau.com.au/forums/topic/...-my-sau-email/

Harvesting & using email addresses is against the law in Australia.
https://www.acma.gov.au/theACMA/spam...ng-prohibition
Maybe someone should let BargainsAU know?
Fed is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 10:57 AM   #47
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

The header suggests a spam bot was sending it all addresses starting with "fordforums_com." .
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:00 AM   #48
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

Quote:
Originally Posted by aussiblue View Post
Perhaps your mail provider was hacked ala Yahoo mail.
At the time I signed up for fordforums I was using my own mailserver and I immediately deleted the signup confirmation after, leaving no trace of that email address ever being used except in your database. I had totally forgot about this site.

Given that other members on here have been affected who signed up many years after I did, it is impossible that the email address was harvested at the time of sign up or at my end.

This only possible source for this breach in my case is your database.

I have never signed up to SAU, who appear to also have been breached. If I did sign up to them I would have received 2x spam, one to fordforums_com_au@ and one to sau_com_au@ (or similar convention depending on the time that I signed up to them, which I never did)
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:03 AM   #49
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

Quote:
Originally Posted by aussiblue View Post
The header suggests a spam bot was sending it all addresses starting with "fordforums_com." .
Well that's easy to check. Did anyone else who received this message use an email address starting with fordforums_com or fordforums_com_au?

It sounds like you are burying your head in the sand because you don't want it to be true. It's not that hard to believe, it happens often even from big companies. The fact that you are using an outdated version of vBulletin without security updates just makes it inevitable that something like this would happen.
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:03 AM   #50
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Quote:
This only possible source for this breach in my case is your database.
Not my database; I am just and ordinary member who like most it seems didn't get this spam. Which is what intriguing me.
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:14 AM   #51
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

Quote:
Originally Posted by aussiblue View Post
Not my database; I am just and ordinary member who like most it seems didn't get this spam. Which is what intriguing me.
Mine arrived into the spam folder on the 4th Jan 2018 at 8:16AM

Could have you already deleted it?
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:16 AM   #52
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Quote:
ell that's easy to check. Did anyone else who received this message use an email address starting with fordforums_com or fordforums_com_au?
or fordforums@com.
or fordforums*com. etc or similar addresses that a spambot would generate.
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:17 AM   #53
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Quote:
ine arrived into the spam folder on the 4th Jan 2018 at 8:16AM

Could have you already deleted it?
Yes; I would have but a) I would have rembered and b) my mailwasher keeps a record and it's not there. Unless of course my ISP and mail provider recognised it as spam and deleted it before it got to me (but I think that rarely happens).
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:21 AM   #54
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

why/how would a spam bot generate such a specific address which just to happens to align perfectly with an entry in your database? Shouldn't the Bot be generating OzLotto winning combinations instead?
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:25 AM   #55
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

Seems like SAU/BOOSTCRUSING/FORDFORUMS and PERFORMANCEFORUMS have been hit by the same thing. Other people report using exclusive email addresses for those forums too.

https://www.google.com.au/search?biw....0.Q_lISWyeyy0

4x Australian+Motoring related forums.

Hmmm.

Inside job maybe unless they are also vBulletin (edit: 2x Invision + 2x vBulletin)
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:29 AM   #56
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

I did get a lot of spam after the Sept 2017 Yahoo hack although I rarely used Yahoo mail; it came to the alternate address I had provided to Yahoo. But not a lot since.
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:31 AM   #57
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Quote:
why/how would a spam bot generate such a specific address which just to happens to align perfectly with an entry in your database?
As I said, not my database; like you I am just a regular forum member intrigued by how you and a few others got spammed.
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:33 AM   #58
Fed
Donating Member
Donating Member1
 
Join Date: Aug 2016
Posts: 321
Default Re: Spammed from BarginsAU

04-01-18 must have been mail out day.
http://www.performanceforums.com/for...-67314333.html
Fed is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:36 AM   #59
aussiblue
FG XR6 Ute & Sedan
Donating Member3
 
Join Date: Oct 2006
Location: Bibra Lake WA
Posts: 9,695
Technical Contributor: For members who share their technical expertise. - Issue reason: Has been floating around the oze tech section for a long time and is always there to give advice when people have an issue. 
Default Re: Spammed from BarginsAU

Were those spammed tapatalk users? https://www.hometheaterforum.com/com...g-away.351617/ and https://www.tapatalk.com/groups/tapa...se-t31803.html etc Does this forum allow tapatalk access?
__________________
regards Blue
aussiblue is offline   Reply With Quote Multi-Quote with this Post
Old 14-01-2018, 11:37 AM   #60
TheLandOfSmeg
Starter Motor
 
Join Date: Jan 2007
Posts: 15
Default Re: Spammed from BarginsAU

Quote:
Originally Posted by aussiblue View Post
I did get a lot of spam after the Sept 2017 Yahoo hack although I rarely used Yahoo mail; it came to the alternate address I had provided to Yahoo. But not a lot since.
So just to confirm, you DID receive the BargainsAU spam in your yahoo? And this aligns with the email address supplied in here: https://fordforums.com.au/profile.php?do=editpassword ?
TheLandOfSmeg is offline   Reply With Quote Multi-Quote with this Post
Reply

Thread Tools
Display Modes

Forum Jump


All times are GMT +11. The time now is 12:44 PM.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Other than what is legally copyrighted by the respective owners, this site is copyright www.fordforums.com.au
Positive SSL