Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: tabshift on June 19, 2011, 11:25:44 PM



Title: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: tabshift on June 19, 2011, 11:25:44 PM
Just got this in my email..  not cool!

Quote
Dear Sir or Madam,


A few hours ago the Bitcoin trading website Mt Gox has been hacked. Malicious individuals have been able to obtain a database containing usernames, email address and encrypted passwords. This information has been posted publicly on the internet.

As a Bitcoin supporter I'm now sending a message to every email address contained in the hacked database. This is to warn you that your username, email address and password have been leaked. I therefore strongly advice you to change your passwords. If you have used the same password on different websites it's highly recommended to change your password on all of your accounts!

For a more secure alternative to Mt Gox, the community appears to be moving to TradeHill. So this is no reason to lose faith in Bitcoin itself. It must be seen as a warning that not every website can be trusted with your data however! Their link is http://www.tradehill.com/?r=TH-R15683 (Note: You can remove the Referral Code when registering if you want!) This is certainly not the only website where you can exchange Bitcoins, also check out http://www.thebitcoinlist.com/dp_bitcoin/bitcoin-exchange/


Sincerely,

A Bitcoin supporter
1CWSjov2N7ix41bZ8bJfHXkdLLbkUsG9Y7


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: idev on June 19, 2011, 11:28:23 PM
Just got this in my email..  not cool!

Quote
Dear Sir or Madam,


A few hours ago the Bitcoin trading website Mt Gox has been hacked. Malicious individuals have been able to obtain a database containing usernames, email address and encrypted passwords. This information has been posted publicly on the internet.

As a Bitcoin supporter I'm now sending a message to every email address contained in the hacked database. This is to warn you that your username, email address and password have been leaked. I therefore strongly advice you to change your passwords. If you have used the same password on different websites it's highly recommended to change your password on all of your accounts!

For a more secure alternative to Mt Gox, the community appears to be moving to TradeHill. So this is no reason to lose faith in Bitcoin itself. It must be seen as a warning that not every website can be trusted with your data however! Their link is http://www.tradehill.com/?r=TH-R15683 (Note: You can remove the Referral Code when registering if you want!) This is certainly not the only website where you can exchange Bitcoins, also check out http://www.thebitcoinlist.com/dp_bitcoin/bitcoin-exchange/


Sincerely,

A Bitcoin supporter
1CWSjov2N7ix41bZ8bJfHXkdLLbkUsG9Y7


Yes me too  >:(


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: maplemath on June 19, 2011, 11:29:28 PM
I got the same message. This is bona fide spam. It's bulk, unsolicited, and commercial in nature.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: DamienBlack on June 19, 2011, 11:31:16 PM
This is a good chance for tradehill to show that they won't put up with spam sent to stolen emails. Ban that user.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: SgtSpike on June 19, 2011, 11:34:42 PM
This is a good chance for tradehill to show that they won't put up with spam sent to stolen emails. Ban that user.
This.

I will contact Tradehill about this, and suggest others do the same.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: interfect on June 19, 2011, 11:40:03 PM
I was OK with one. But I got six of the same e-mail. If you're going to e-mail all the users in the leaked database like a badass 31337 Internet hero, do it properly.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: MSJHWT on June 19, 2011, 11:40:54 PM
I think tradehill posted in another thread they'd be removing this users referrals.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Distribution on June 19, 2011, 11:44:29 PM
This is a good chance for tradehill to show that they won't put up with spam sent to stolen emails. Ban that user.

But that means that would have to ban everyone who identifies themselves as "A Bitcoin Supporter."


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: MadduckUK on June 19, 2011, 11:48:56 PM
This is a good chance for tradehill to show that they won't put up with spam sent to stolen emails. Ban that user.

But that means that would have to ban everyone who identifies themselves as "A Bitcoin Supporter."

 ??? how did you draw that conclusion?


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: opticbit on June 19, 2011, 11:58:49 PM
I only got 3 copies.

I tried searching the referral code found this thread.

its also on github and pastbin  user zapnap. was on overclocker.net and hackernews or somethign.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: kjj on June 20, 2011, 12:03:13 AM
This is a good chance for tradehill to show that they won't put up with spam sent to stolen emails. Ban that user.

But that means that would have to ban everyone who identifies themselves as "A Bitcoin Supporter."

Couldn't they just ban the one guy that has that referral code?


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Distribution on June 20, 2011, 12:12:19 AM
This is a good chance for tradehill to show that they won't put up with spam sent to stolen emails. Ban that user.

But that means that would have to ban everyone who identifies themselves as "A Bitcoin Supporter."

 ??? how did you draw that conclusion?

The email (for me) was signed

"Sincerely,
A Bitcoin supporter"

It was a joke.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: jibjabz on June 20, 2011, 12:21:52 AM
I admire his hustle, but this guy is a real fool.

My guess is Trade Hill has this guy's real name, etc.

What he did is very illegal, and there's a reason spammers don't tell you who they are. YOU personally can sue this guy (for something like $16,000 I think). Of course odds are he doesn't have enough assets to cover even 1 settlement, let alone thousands, so you're not going to get rich off him but he is probably in a world of hurt from this.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: DeiBellum on June 20, 2011, 12:24:52 AM
Fire Away! This is the email address it was sent from.


goemitar@bonecrusher.gulfsouthmedia.com


This was recovered from the email's source code.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: jackjack on June 20, 2011, 12:25:28 AM
I admire his hustle, but this guy is a real fool.

My guess is Trade Hill has this guy's real name, etc.

What he did is very illegal, and there's a reason spammers don't tell you who they are. YOU personally can sue this guy (for something like $16,000 I think). Of course odds are he doesn't have enough assets to cover even 1 settlement, let alone thousands, so you're not going to get rich off him but he is probably in a world of hurt from this.
Very illegal??

Fire Away! This is the email address it was sent from.
Congrats you know how to read headers


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Distribution on June 20, 2011, 12:27:11 AM
Fire Away! This is the email address it was sent from.


goemitar@bonecrusher.gulfsouthmedia.com

How do you know?


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: TiagoTiago on June 20, 2011, 12:33:44 AM
Unless i'm mistaken, email senders can be spoofed quite easily...


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Jered Kenna (TradeHill) on June 20, 2011, 12:46:17 AM
I think tradehill posted in another thread they'd be removing this users referrals.

This thread http://forum.bitcoin.org/index.php?topic=19707.0

In short, we hate spammers as much as you do and this isn't how we run our business.
At the least he'll have his referral codes stripped.



Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Seraphim401 on June 20, 2011, 12:54:20 AM
I got that shit to  >:(.
Fuck you whoever you are!


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: edd on June 20, 2011, 12:59:12 AM
I got 7 of those emails.

I'd also like to say that this person is not affiliated with The Bitcoin List in any way.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Ksg89 on June 20, 2011, 01:02:39 AM
I think I've worked out who this person is who sent the emails. For obvious reasons I wont name and shame, but I must say that wether the intentions where good or bad. Not cool.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Epinnoia on June 20, 2011, 01:28:12 AM
Got a 2nd email with a different link to TradeHill:

Quote
From:  bittrader566@yahoo.com
Subject:  Was this the last straw with Mt Gox?

The latest in a string of hacks to Mt Gox has made me move to Trade Hill. Use this referral code to get 10% off all trade fees: TH-R13698

Sign up at Trade Hill today!

http://www.tradehill.com/?r=TH-R13698





Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: foo on June 20, 2011, 01:34:55 AM
Fire Away! This is the email address it was sent from.


goemitar@bonecrusher.gulfsouthmedia.com


This was recovered from the email's source code.
Googling "goemitar" turns up interesting results...


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: evoorhees on June 20, 2011, 04:15:15 AM
Wow lot's of hostility!

I got the email also and personally appreciated the message. So what if he put a referral code in there? I think if he hadn't put the TradeHill reference then nobody would have a problem with his announcement/public service message. But the fact that he might -profit- from referrals... well that's unacceptable!!!

Not a big deal either way, and it's probably good for everyone on that list to have received an email informing them that the list was compromised.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Distribution on June 20, 2011, 05:02:10 AM
Wow lot's of hostility!

I got the email also and personally appreciated the message. So what if he put a referral code in there? I think if he hadn't put the TradeHill reference then nobody would have a problem with his announcement/public service message. But the fact that he might -profit- from referrals... well that's unacceptable!!!

Not a big deal either way, and it's probably good for everyone on that list to have received an email informing them that the list was compromised.

I think people are hostile because they believe he's lying. If he's not lying, then maybe he's the one who compromised it. Or at least that's the feeling I got from them.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Endeavour79 on June 20, 2011, 05:08:57 AM
+1

I don't mind this email..will be one of many expected in the next days..As the email addresses are floating around in the wild a lot of spam is to be expected..
Just delete and ignore..

And it has a positive side effect as well..People are reminded that websites are always vulnerable for attacks and that you never should use the same password again and so on..

And in addition..it should also be a wakeup call for all the lazy server admin and IT ppl thinking, that they never will be hacked..Improve your security guys..before it's to late..

Cheers
End


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: alexdrans on June 20, 2011, 05:25:15 AM
Wow lot's of hostility!

I got the email also and personally appreciated the message. So what if he put a referral code in there? I think if he hadn't put the TradeHill reference then nobody would have a problem with his announcement/public service message. But the fact that he might -profit- from referrals... well that's unacceptable!!!

Not a big deal either way, and it's probably good for everyone on that list to have received an email informing them that the list was compromised.

I think people are hostile because they believe he's lying. If he's not lying, then maybe he's the one who compromised it. Or at least that's the feeling I got from them.

He's not the one who compromised it, he's just someone who rote a program to extract the emails from the CSV file and then proceeded to email everyone on the list so a) he could get them to sign up to Trade Hill with his referral and b) they might send him BTC donations to the address he provided. Yes, he did this with the intention of hoping to get referrals/free coins but what he did was also informative if for some reason you hadn't already found out about MtGox


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: Distribution on June 20, 2011, 05:39:52 AM
Wow lot's of hostility!

I got the email also and personally appreciated the message. So what if he put a referral code in there? I think if he hadn't put the TradeHill reference then nobody would have a problem with his announcement/public service message. But the fact that he might -profit- from referrals... well that's unacceptable!!!

Not a big deal either way, and it's probably good for everyone on that list to have received an email informing them that the list was compromised.

I think people are hostile because they believe he's lying. If he's not lying, then maybe he's the one who compromised it. Or at least that's the feeling I got from them.

He's not the one who compromised it, he's just someone who rote a program to extract the emails from the CSV file and then proceeded to email everyone on the list so a) he could get them to sign up to Trade Hill with his referral and b) they might send him BTC donations to the address he provided. Yes, he did this with the intention of hoping to get referrals/free coins but what he did was also informative if for some reason you hadn't already found out about MtGox

That's true. I was just answering why I thought people were being hostile. Although I don't understand ow I was in the list as I don't have a Mt Gox account. Unless other sites were compromised too.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: RomertL on June 20, 2011, 06:46:29 AM
Wow lot's of hostility!

I got the email also and personally appreciated the message. So what if he put a referral code in there? I think if he hadn't put the TradeHill reference then nobody would have a problem with his announcement/public service message. But the fact that he might -profit- from referrals... well that's unacceptable!!!

Not a big deal either way, and it's probably good for everyone on that list to have received an email informing them that the list was compromised.

I think people are hostile because they believe he's lying. If he's not lying, then maybe he's the one who compromised it. Or at least that's the feeling I got from them.

He's not the one who compromised it, he's just someone who rote a program to extract the emails from the CSV file and then proceeded to email everyone on the list so a) he could get them to sign up to Trade Hill with his referral and b) they might send him BTC donations to the address he provided. Yes, he did this with the intention of hoping to get referrals/free coins but what he did was also informative if for some reason you hadn't already found out about MtGox

That's true. I was just answering why I thought people were being hostile. Although I don't understand ow I was in the list as I don't have a Mt Gox account. Unless other sites were compromised too.

Well he used stolen email-addresses (even though he didn't stole them himself) in order to make money from a referral code. Not to help people, the mail would of course not exist without the referral. Spam in its worst form


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: molecular on June 20, 2011, 12:33:56 PM
I was OK with one. But I got six of the same e-mail. If you're going to e-mail all the users in the leaked database like a badass 31337 Internet hero, do it properly.

One is not ok. 15 (which I got) is not ok at all. What the hell good is it to send it more than once???



Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: molecular on June 20, 2011, 12:37:38 PM
I think I've worked out who this person is who sent the emails. For obvious reasons I wont name and shame, but I must say that wether the intentions where good or bad. Not cool.

His intentions are clear: make money by referring people to tradehill.

The other stuff about "letting everyone know" is bullshit, because mtgox already did that.

This is very lowly behaviour. Shame on him.


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: molecular on June 20, 2011, 12:42:20 PM
well, counting 3 different mtgox-leak-related spam-emails up to now. this sux!

In addition to the one already mentioned, I received:

  • We Accept Bitcoins - GBVault - this one has the recipient list in "To" header, damn moron!
  • Was this the last straw with Mt Gox? - another tradehill referrer.

:(


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: TiagoTiago on June 20, 2011, 05:42:57 PM
I think it is important to keep in mind that anyone could have sent those emails, it's likely not someone Tradehill is very fond of right now...


Title: Re: Someone spamming the MtGox userlist with TradeHill referral spam
Post by: speeder on June 20, 2011, 05:47:16 PM
I think Tradehill should say that anyone that mass-spam mtgox users with referer will get banned and account stuff seized, this would stop.