Hey guys,
Be careful out there. I'm getting messages from some of you with a link to a Russian website. I can only guess that it infects your PC and sends itself to everyone on your contact list, then some of them click on the link, etc.
So, first of all, please DO NOT CLICK THE LINK! Secondly, delete the message immediately.
I don't know the source of this problem, but it can either be a direct hack of your account or it could simply be a case of spoofing. But it seems peculiar that I'm getting the message only from other surveyors. Might just be coincidence.
For safety's sake, I'm having my host perform a security audit on the server, just to make sure. However, I don't suspect that to be the problem.
Did U get one from my public yahoo address? As my main email address did not receive one (Probably because spammer stopped it) Doug Casement emailed that he got one.
For those who have been invaded you will get returned emails from odd addresses that are not in your address book .
Wendell I went to log in on my face book page and my yahoo email address was sitting there as large as life and I was not logged in !
I suspect Facebook is the security leak !
RADU
Word has it, Keith had the same problem earlier today...
Yes he did.
RADU
I Got One
I got one from a fellow surveyor this morning that looked like the normal email messages that I got from him and it simply said "Many thanks" and it had the surveyors name, address, registration number - everything very typical of our other correspondence. When I clicked on the link, a page full of letters, characters and numbers came up. After I closed it, AVG came on the screen with a full page notification that it had caught it and stopped it. I have been deleting the returned email notifications for a week, but this one caught me off guard. Good thing that it didn't catch AVG off guard...
I got emails from "Deral Paulk" and "Beer Legs" this morning with no subject line and links. Both were deleted on the spot.
I Got One from Sanibel Surveys on two of my email addresses
Andrew D. Johnson, PSM
Sanibel Surveys
He is on Facebook too!
How does one tell Facebook that they are being breached?
RADU
I agree it's likely Facebook. When it happened to me, I spent time arguing with Yahoo.com. Then afterward went back to Facebook, and was told I had last signed on in California. I live in Florida. I don't think they're bad people (facebook) I think it's just such a large site they're a good target for hackers.
Also I am not on Facebook.
Wendell, (and everybody)
Here is some more info for your investigation:
I got those messages from Chris Harmon, Deral Paulk, and Sanibel Surveys (Andy Johnson). These are all gmail addresses, as is mine.
Deral's "To:" list included at least 4 of my personal friends that have probably been included with Deral and Andy on small "mass" mass e-mailings by me, of a joke or a picture, or whatever.
I do not have Chris Harmon on my facebook, nor my regular contacts list, and I don't know if he's got a pseudonym (BeerLegs?).
I hope this helps.
Carl
i agree, GMAIl is the source,,, i got return email and texts this morning from friends that are neither surveyors nor facebookers. hell,my account may have been the source for all I know.
> i agree, GMAIL is the source,,, i got return email and texts this morning from friends that are neither surveyors nor facebookers. hell,my account may have been the source for all I know.
It could be. I'm not casting aspersions or anger, just facts. I find it odd that MY friends ended up on Derals list. Of course, you can only see parts of the email list that the ruskie spammer sent. Oddly, most of them begin with the letter "C".
I only got return email from Yahoo, but sanibel surveys came in on gmail and my business email as I have written to Andy so in his address book
Seems it is going from address book to address book and adding or making up addresses.
Still believe initial hack through FB
RADU
I knew I should have checked in here first.
A few minutes ago I checked my Hotmail account and found a message from jppls1, Jim Petty in Arkysaww. Same thing. I clicked on the link. AAARRRGGGHHH
I do not participate on Facebook. Visible recipients started with B.
in a reply from someone i spammed, all the addresses started with a C as well..
What happened when U clicked on link?
RADU
Weird letters and symbols everywhere.
Any chance this is tied to LinkedIn?
I got one from Deral, but hotmail said the link was blocked for spamming.
Could also be..
RADU
I got hit with the thing also. I didn't hit the link either. Makes me want to find the POS in a dark alley and give a good 'spamming' to him.