General Chat / NE SPAM!

this popped up in my mail box and when i clicked the link to be taken to my NE control panel, my firewall stopped it saying it was a phishing/spam site

rK_,

mignulikz has sent you a new personal message titled "Hello".

You can read this personal message by following the link below:

http://forums.nedesi...=...&MSID=44697


Regards,

The New Element team.
http://forums.nedesigns.com/index.php

its does not take you to ne, so watch out!, some ones phishing using the site.

weak sauce.

Edited by rK_, 08 April 2009 - 11:13 AM.

apparently a bot, or real human, registered an account that ran a script which sent pms to all our members trying to promote a russian adult site. we were very confused there is no max pm limit in ipb, or that we have not enabled it. geewhzz tried to manually delete all those pms via sql editing.

does anyone still have the pm now? did you anyone get another?

Mine is gone..
If you clicked that link something is wrong with you

I haven't seen spam/phishing like this before though..

SF

well I cant such pms more often but than they link to a topic.
so I clicked it but before it started loading i saw where it linked and closed the window again.
i dont have it now.

I think every member has got one. I have deleted already.

I didn't open it, it was deleted when I clicked on 1 New Message...

saw the PM before the email, checked the member's profile to see they had registered today, figured it was a spambot, blocked them, deleted message, and emailed NE about it.

apparently a bot, or real human, registered an account that ran a script which sent pms to all our members trying to promote a russian adult site. we were very confused there is no max pm limit in ipb, or that we have not enabled it. geewhzz tried to manually delete all those pms via sql editing.

does anyone still have the pm now? did you anyone get another?

I got the same bot/idoit at RctTown with a different username, but the email & IP addys were the same. I banned it before they validated their account.

There is a limit for the Members group here, "You may enter up to 15 names in the carbon copy box." The default setting is 5 for members.

You have to edit the groups, each group can have a different amount.

In the ACP, click the MANAGEMENT tab, then Manage User Groups. In the drop down on the right of Members click Edit Group, go down to Global Permissions

Change this to what you want it to be,
Max. Number users allowed to mass PM?
(Enter 0 or leave blank to disable mass PM)

Then click Complete Edit at the bottom

~Havingfun~

they didnt send a mass Pm tho there Rick. its a bot, it reads the member list and then is able to send out the PM's 1 at a time to everyone on the memberlist.

there is a topic on IPS forums about this issue. Best combat is to ADMIN validate ALL members. this would include actually looking up the username on goggle to see if its a spammer. or I think Rick has and addy he can give you to look them up the easy way....

Oh I see riven3d, I can`t see all the topic`s there.

But to anyone that deals with new members here`s where I check their IP`s...

Stop Forum Spam
Welcome

We catch a lot of spammers trying to register on forums. And we post their details here.

We currently have information on 224176 spammers since about December 2006. Here is the last 24 hours worth of spammers caught in our traps. Or enter an IP address, email address, or username below to search.

http://www.stopforumspam.com/

Its a good way to squash them there bots/pests.

~Havingfun~

I had 1 new message as well, but it had been deleted from my inbox. Thanks gee!

I didn't open it, it was deleted when I clicked on 1 New Message...

Same with me.

I followed the link, but then I got a "Message does not exist," message. I suppose it was already deleted by the time I got to it.

I opened it on accident because I've never got a "phishing" message before. Unfortunately, my mom was almost next to the computer when I opened it. Luckily I closed it in time.

I've got a Russian and Asian bride being shipped by UPS Air right now, the site wasn't spam!
Yeah... I saw the message and deleted it.

When I logged in last night after noticing the email, the PM was already gone. I wonder if any old members will stop by NE due to this spambot jogging their memory.

just got another one =/

For the people that do this shit... I have no issues with the use of torture devices.

I can't open old messages now.. I'm getting the following error;

Fatal error: Call to undefined method ipsclass::parse_member() in /home/geewhzz/public_html/forums/sources/action_public/messenger.php on line 1418

SF

dito