AUSTRALIA'S ORIGINAL AND BEST CAMP OVEN AND OUTDOOR COOKING CAMPING AND LIFESTYLE FORUM

Aug 5^th, 2012 at 7:07pm

sooty Offline
COCIA Diamond Member
Mackay C.Q.
Joined: Jul 1^st, 2006 at 8:20pm
Last online: May 11^th, 2019 at 12:46pm

Gender:
Zodiac sign:
Posts: 1196

I have just received two emails headed "Private message"
One from Robbo and the other from Art
They were all titled "private message" with a link saying "private message"
I have been warned by another site that they are viruses, so didn't open.

The first thing that should make the alarm bells ring is that a genuine private message notification would normally be sent from an email account associated with the forum (e.g. forum@cocia.com) and not from the PM sender themself.

Why would someone send you an email advising you to login to view a private message? (you'd normally use one or the other, not both)

Additionally the link included would point to a server not associated with a forum you are associated with

If you click on that link, you might notice that the page that comes up probably doesn't look the same as the login page for any forum you are a member of.

Kev

I started out with nothing and still have most of it

Back to top

IP Logged

Reply #1 - Aug 5^th, 2012 at 8:48pm

Derek Offline
COCIA Owner
The "Camp Oven Cook"
Joined: Nov 10^th, 2003 at 2:00pm
Last online: Yesterday at 8:53pm

Gender:
Mood:
Zodiac sign:
Posts: 18980

sooty wrote on Aug 5^th, 2012 at 7:07pm:

I have just received two emails headed "Private message"
One from Robbo and the other from Art
They were all titled "private message" with a link saying "private message"
I have been warned by another site that they are viruses, so didn't open.

The first thing that should make the alarm bells ring is that a genuine private message notification would normally be sent from an email account associated with the forum (e.g. forum@cocia.com) and not from the PM sender themself.

Why would someone send you an email advising you to login to view a private message? (you'd normally use one or the other, not both)

Additionally the link included would point to a server not associated with a forum you are associated with

If you click on that link, you might notice that the page that comes up probably doesn't look the same as the login page for any forum you are a member of.

Kev

Hi Kev

If you still have them can you please forward the emails to me thanks so that I can have a look.

I have checked the background stats of the forum and cannot see anything unusual or anything to show where such emails could have come from.

As you know I hate spam and I need to know if it is coming from the forum so I can look at it.

Many thanks.

Derek

Retired
Camp Oven Cook

Back to top

IP Logged

Reply #2 - Aug 5^th, 2012 at 9:40pm

sooty Offline
COCIA Diamond Member
Mackay C.Q.
Joined: Jul 1^st, 2006 at 8:20pm
Last online: May 11^th, 2019 at 12:46pm

Gender:
Zodiac sign:
Posts: 1196

Sorry Derek I have deleated them.
It was the Lure lovers site that alerted me to this one.
You may gain a bit from this link

http://www.lurelovers.com/forum/warning-email-malware_topic9821.html
Kev

I started out with nothing and still have most of it

Back to top

IP Logged

Reply #3 - Aug 5^th, 2012 at 9:51pm

Derek Offline
COCIA Owner
The "Camp Oven Cook"
Joined: Nov 10^th, 2003 at 2:00pm
Last online: Yesterday at 8:53pm

Gender:
Mood:
Zodiac sign:
Posts: 18980

Thanks Kev

Different software so doesn't give me much to go one.

By the way, welcome back to the forum. Long time no see.

Everyone, PLEASE, if you ever receive anything like this please just forward them to me so I can look at them. Don't worry about thinking you may be sending me a virus. I do have plenty of protection on my system and do enjoy playing with them.

All emails sent out from the forum should come from admin@aussiecampovenforum.com

Thanks

Derek

Retired
Camp Oven Cook

Back to top

IP Logged

Reply #4 - Aug 5^th, 2012 at 10:02pm

Derek Offline
COCIA Owner
The "Camp Oven Cook"
Joined: Nov 10^th, 2003 at 2:00pm
Last online: Yesterday at 8:53pm

Gender:
Mood:
Zodiac sign:
Posts: 18980

Kev, I take it you didn't have messages from Aart and Robbo when you logged in??

Cheers

Derek

Retired
Camp Oven Cook

Back to top

IP Logged

Reply #5 - Aug 5^th, 2012 at 10:09pm

sooty Offline
COCIA Diamond Member
Mackay C.Q.
Joined: Jul 1^st, 2006 at 8:20pm
Last online: May 11^th, 2019 at 12:46pm

Gender:
Zodiac sign:
Posts: 1196

Did not log in Derek as I know for sure as Aart does not have my email so was sus from the start.
Sorry can't be of more help and I know it didn't originate from you.
Have been so busy of late but do still call in to check on things.
Kev

I started out with nothing and still have most of it

Back to top

IP Logged

Reply #6 - Aug 5^th, 2012 at 10:32pm

Chally Offline
COCIA Legend
I Love COCIA
Joined: Mar 15^th, 2012 at 2:26pm
Last online: Yesterday at 9:36pm

Gender:
Posts: 3707

I got a similar email recently. It was from a woman who I took wedding photos for a few years ago and she had a hotmail email address so it immediately rang alarm bells. So it would seem that the emails can originate from anywhere and not just in relation to any forums.

Jeff

Back to top

IP Logged

Reply #7 - Aug 6^th, 2012 at 7:34am

Fishfood Offline
COCIA Bronze Member
I Love COCIA
Joined: Apr 9^th, 2012 at 8:35pm
Last online: Feb 21^st, 2013 at 7:26pm

Posts: 41

Yep i got 2 the other day from a friend both sent 5 am she doesn't turn her puter on till 9 am

Back to top

IP Logged

Reply #8 - Aug 6^th, 2012 at 9:41am

outback jack Offline
COCIA Platinum Member
I Love camp oven cooking
and going bush
Joined: Apr 14^th, 2009 at 9:06pm
Last online: Aug 16^th, 2025 at 10:40pm

Gender:
Zodiac sign:
Posts: 977

i also got 2 emails from robbo to my email address. i sent an email to robbo to advise him about these possible virus messages

i will forward them to you derek

Back to top

IP Logged

Reply #9 - Aug 6^th, 2012 at 10:02am

Derek Offline
COCIA Owner
The "Camp Oven Cook"
Joined: Nov 10^th, 2003 at 2:00pm
Last online: Yesterday at 8:53pm

Gender:
Mood:
Zodiac sign:
Posts: 18980

Thanks for that Jack and thanks for the email.

This is a scam that has originated in Montenegro in the Balkans with the Internet code of .me. It is becoming a very common and while not a virus it is quite annoying.

It gives you a link to a website which when you look at can look quite like a genuine Windows Live screen. The site asks you to log into a Windows Live but in fact it is collecting your login name and password. They then use your email to send out spam.

First pic below is a capture of the FAKE LOGIN SCREEN

On this screen when you go to close it a popup appears saying "Wait, Don't go yet" This is also part of the scam to get you to login.

It is in the second pic below.

These certainly have nothing to do with the forum.

As Kev did, don't login to these things. Best to just delete.

Cheers

Derek

scammer.jpg (57 KB | )

scammer2.jpg (83 KB | )

Retired
Camp Oven Cook

Back to top

IP Logged

	am pm	Welcome, Guest. If this is your first visit to COCIA, be sure to check out the many references on the Help Board. You will have to Login or Register, before you can post. Click the register TAB below to proceed or to start viewing messages, simply select the Board that you want to visit.