Help - Search - Members - Calendar
Full Version: Bots Sending Spam Pms Spam Link
Fullmetal Alchemist Discussion Board > Site Support Center > Technical Support & Questions
Raptorix
I never remembered I was still a member of this site until I got a Private Message notification from a member "zuratikl", who sent me a simple message with a link "Our Rules have changed!" or something along those lines. When I clicked the link, I was sent to a medication selling website! How rude! Going back, I noticed that the user who sent me this PM has zero posts--thus this had to have been a Russian Bot (I'm taking the hint from the username) rather than a real moderator.

I immediately deleted that PM, and cleared my private data from Firefox in case of any hidden spyware the website might carry.

Has anyone else experienced Russian spambots PMing you or posting randomly on the boards?
Tombow
Yes, and we are eradicating these spambots as we speak.
If you get any PM from anyone you do not know, please DO NOT OPEN any link inside that PM (just as a precaution.)
Then, please report the incident of such PM, including the sender's name and content of that PM, by posting these on this thread, Thank you!!!

zuratikl bot has been killed.
ETA: This has been taken care of. Thank you everyone!!
Please delete any remaining PM from zuratikl in your PM Inbox. biggrin.gif



===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
Mat-Mat
Same thing happened to me today. I clicked on the link before reading this, and it was selling Viagra!!!! Ugh, it was like the person with all the accent marks and the russian website.
Tombow
@Mat-Mat - Thank you. Could you tell us the name of sender of that PM? And, if possible, click on "REPLY" button under the PM... this is NOT for replying, but just to copy the whole codes for that PM, then on your post copy that code and post it here. Thanks!! smile.gif
I think we already eradicated that bot, but just to double check. ^^


===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
Mat-Mat
...Yeah, about that....I deleted it. Heheh...sorry.
Tombow
QUOTE (Mat-Mat @ May 13 2009, 05:42 PM) *
...Yeah, about that....I deleted it. Heheh...sorry.

Of course. ^^ Yes, you did the right thing. ^^
Thank you for the report anyway!! Appreciate it very much!! happy.gif


==================

<PUBLIC ANNOUNCEMENT to all members>
If you get any PM from anyone you do not know, please DO NOT OPEN any link inside that PM (just as a precaution.)
Then, please report the incident of such PM, including the sender's name and content of that PM, by posting these on this thread, Thank you!!!

zuratikl bot has been killed.
ETA: This has been taken care of. Thank you everyone!!
Please delete any remaining PM from zuratikl in your PM Inbox. biggrin.gif


===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
asunder
http://forums.invisionpower.com/topic/2829...entry1794928%22

This is a defect based on ...humans entering (capatcha) codes lol. talk about a low tech hack. I'll poke paladin to update the software.


QUOTE
We have received numerous reports from clients regarding spamming on the Personal Message (PM) system in IP.Board 2.3.6 and below. After consulting with reCaptcha (the provider of the captcha system in 2.3.6) we believe that humans are being used to bypass the captcha and then the newly created account is given to an automated script which sends PMs in huge quantities to your members.
RoyxRizaFan4ever
Shoot, I clicked on that zuratikl bot because I thought there were new rules. Shoot, shoot, shoot. Does it effect anything?

I blocked them from my PMs, even though I already clicked on it. Hopefully they won't come back. >,<

*sigh* This is what I get for not being a regular poster...
Tombow
QUOTE (asunder @ May 13 2009, 08:11 PM) *
http://forums.invisionpower.com/topic/2829...entry1794928%22....
This is a defect based on ...humans entering (capatcha) codes lol. talk about a low tech hack. I'll poke paladin to update the software.

Ah, good to know. Thank you, asunder!! biggrin.gif

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
Becca-chan
I know that I got two PM's from that zuratikl guy as well ( yesterday and the day before that) but thankfully I never clicked on the link inside his PM's.

After the second PM was sent, I just blocked him and deleted his/ it's messages.
Tombow
Thank you, Becca-chan!! ^^

I think this one has been taken care of, so I think we don't need any more report.
Everyone who gave us the report, thank you so much!! happy.gif
If your PM Inbox still has PM from the spambot please delete it. smile.gif

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
Sweetdeath04
I got a PM from zuratikl too- didn't click on it though. The PM has been deleted and the sender blocked.

EDIT: Sorry, just noticed the post above!
Tombow
@Sweetdeath04 - No problem!! Thank you for the report. ^^

I think this one has been taken care of (thank you, admins!! ^^) so I think we don't need any more report. Everyone who gave us the report, thank you so much!!
If your PM Inbox still has PM from the spambot please delete it. smile.gif
This case has been taken care of. Sorry everyone for the inconveniences we had, and thanks again for your reports and cooperations. smile.gif

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
EdwardElricAlchemist
E-mail Notification Of (spam) Pm With "new Rules", PM from spambot with disguised advertisement link:

Got an e-mail stating there was a update to the rules of the site...click on the link...and bam! It takes me to a canadian pharmacy site...anyone else getting this?



<Merged "E-mail Notification Of (spam) Pm With "new Rules", PM from spambot with disguised advertisement link:" thread here. 05/16/2009 ~Tombow>
AzhiDevn
woah..no, not really...but i do get lots of those canadian pharmacy spam in my mail...u_ú annoying...
Tombow
@EdwardElricAlchemist and AzhiDevn - Yes, we had these spambots yesterday, then these bots were taken care of, and the board added some extra measures against these type of spambots. I made more announcements last night, but You can read the gist of it on Spambots PMs with advertising links thread that's in this forum. (Anyway, sorry for these spam PMs. Please delete them. smile.gif )

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
xXdark_angel_nekoXx
come to think of it i did get a message saying that there were new rules for the forums. so i am not sure if this is true or not. and if it helps i still have the message and everything too.
Tombow
@xXdark_angel_nekoXx - Thanks. ^^ Since the board did NOT send out such message, we can already tell you that that one is a Spam.
Please go ahead, and delete that message. biggrin.gif

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
xXdark_angel_nekoXx
QUOTE (Tombow @ May 15 2009, 11:19 AM) *
@xXdark_angel_nekoXx - Thanks. ^^ Since the board did NOT send out such message, we can already tell you that that one is a Spam.
Please go ahead, and delete that message. biggrin.gif



ok i will do that. thanks for the help. happy.gif
Tombow
^ You're welcome, and sorry for the spam PM. ^^

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
Popogeejo
If you clicked the link then no offence but you deserve whatever happens to you.

Fun tips:
1) If you get a PM by someone who's not a mod or admin about the rules then be suspicious. At best it's a rick roll, at worst it'll eat your computer. Be doubly suspicious if it's a new member with no posts.

2) When you mouse over a link in most browsers it'll show the full url or most of it in the bottom left.
Tombow
^ So true, and totally helpful stuff. Please listen to him. smile.gif

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
Zarpia
yup, a lil late but i just logged in and i got the pm. did delete it.
xXdark_angel_nekoXx
QUOTE (Tombow @ May 15 2009, 11:35 AM) *
^ You're welcome, and sorry for the spam PM. ^^

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif



oh it is ok. i don't mind. i figure that i ask about it in case it was important or something like that.
Tombow
QUOTE (xXdark_angel_nekoXx @ May 20 2009, 12:33 PM) *
QUOTE (Tombow @ May 15 2009, 11:35 AM) *
^ You're welcome, and sorry for the spam PM. ^^
oh it is ok. i don't mind. i figure that i ask about it in case it was important or something like that.

@xXdark_angel_nekoXx - And, that is a very good, & cautious approach, and I commend you for that. ^^

Also, waving hi to Zarpia. ^^

===================

To everyone:

If you received a PM message from Zurakitl titled “New forum rules!” and containing a link for a "New Rule," that is a spam PM. The board did NOT send such PM regarding the "new forum rule." The link in the PM leads to an advertisement of some Viagra vendor.

This bot has been killed, and since then the board has added extra measures against this kind of Spam attack.

Sorry for the spam PM you received. Please simply delete that spam PM. Thank you!! smile.gif
Goral
User MannInBlackk has sent me a PM of such content:

QUOTE
Hello, friend. There are viruses' activities from your computer in last few days. Strongly recommend you to check your computer. You can find a report about your computer's security and solve every problem with it here: http://www..check-pc.net/detected/Goral
Thank you. Forum member.
(I've deliberately added a dot so that no one woul go to that site by a coincidence).

I didn't even bother to check what was on the site he sent (I would have to switch to linux to avoid possible virus infection) and I would suggest to ban him. Most probably he sent similar PMs to many other users and it looks like he registered to do only that.
Edit: Quick search and here's what I found:
http://www.siteadvisor.com/sites/check-pc....stid/?p=3638637

Anyone else received a similar PM?
Tombow
^ Thank you Goral!! ^^

Yes, we are getting reports on members receiving PMs from this spammer. Oh boy. sad.gif


-------------------------------

ETA:

URGENT NOTE to everyone!!!

If any of you get any PM from MannInBlackk, pleaes hit the DELETE button.
It is a Spam PM with the link to some unwanted site. The spammer has been taken care of, but if you happen to find a leftover PM from MannInBlackk in you Inbox, please DO NOT click on any of the links on the PM, and instead, simply hit the DELETE button.


Thank you! smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.