Bitcoin Forum

Other => Beginners & Help => Topic started by: pat1900 on February 21, 2013, 03:43:49 PM



Title: Anybody got spam via email addr only known to Mt.Gox?
Post by: pat1900 on February 21, 2013, 03:43:49 PM
As I am paranoid enough to generate different email addresses for all my contacts I can easily track down the source/cause of spam. Recently I received quite a few of those infamous "you as the next of kin of the deceased Nigerian oil prince so that the sum of $26.5 million be transferred to your bank account" spam messages to that very email address only known to Mt.Gox.

I'm not saying Mt.Gox send this type of stuff out, but it seems their database or their mail server is leaky in a way.

Anybody else experiencing this recently?


Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: RodeoX on February 21, 2013, 03:49:54 PM
I would be paranoid also.
Phishing??


Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: greyhawk on February 21, 2013, 03:53:22 PM
Remember when Mtgox got their client database stolen? That's still floating out there for everyone to read. So it's probably from there.


Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: Stephen Gornick on February 21, 2013, 03:56:51 PM
Anybody else experiencing this recently?

If your account was registered before mid-Jun 2011, then yes -- those come about once a week if not more frequent:

ALL mtgox password has been compromised, change asap, everywhere you used it
 - http://bitcointalk.org/index.php?topic=19566.0

The first post in that thread has a link to the list so you can see if your e-mail is in it.


Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: pat1900 on February 21, 2013, 09:18:29 PM
I created both my MtGox account and the email address in August 2012. But I remember vaguely reading about a minor glitch in gox's operations end of last year that didn't worry me too much. Can't remember exactly when and what it was. Something like the database containing all or some of the public keys of gox users has been visible, but that's not a big secret anyway.

So I'm going to change my username and email at gox in a minute (i.e. close the account and open a new one) and see what happens.


Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: Stephen Gornick on February 22, 2013, 04:10:25 PM
I created both my MtGox account and the email address in August 2012. But I remember vaguely reading about a minor glitch in gox's operations end of last year that didn't worry me too much. Can't remember exactly when and what it was. Something like the database containing all or some of the public keys of gox users has been visible, but that's not a big secret anyway.

So I'm going to change my username and email at gox in a minute (i.e. close the account and open a new one) and see what happens.


Did you by chance use that e-mail address with Mt. Gox's support board?

 - http://www.zendesk.com/blog/weve-been-hacked


Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: silvergoldandbitcoin on February 22, 2013, 04:59:11 PM
It doesn't seem to matter just how careful/paranoid I am, I always get spam on every email I own...


Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: avegetable on February 22, 2013, 07:29:44 PM
Spammers will add randomly-generated email addresses to their target lists sometimes. Depending on the response from the mail server, it may be possible for them to determine if the address exists, without even getting a reply.

So, if your email address is relatively simple, like a combination of one or two common English language words or names, plus numbers, or a even a short combination of random characters, it's possible to get spam even if you never revealed the address to anyone.





Title: Re: Anybody got spam via email addr only known to Mt.Gox?
Post by: silvergoldandbitcoin on February 22, 2013, 07:41:18 PM
Spammers will add randomly-generated email addresses to their target lists sometimes. Depending on the response from the mail server, it may be possible for them to determine if the address exists, without even getting a reply.

So, if your email address is relatively simple, like a combination of one or two common English language words or names, plus numbers, or a even a short combination of random characters, it's possible to get spam even if you never revealed the address to anyone.





.... Crap. That sucks xD