Bitcoin Forum
November 24, 2017, 01:49:50 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Phishing attack on btctalk users  (Read 1370 times)
IKnowWhatYouDid
Newbie
*
Offline Offline

Activity: 9


View Profile
November 19, 2014, 06:25:32 PM
 #1

Just wanted to report that some scumbag is attacking btctalk users that have a public email sending this email.
The link redirects to www.petcaretv.com

--------------------------------------------------------------------------------------------------------------------

Dear Users,

This mail was sent because you need install New Update for your browsers (Mozilla Firefox ,Internet Explorer,Chrome,...) for News updates on [Suspicious link removed] set Java Software for your Browsers click the following link:
https://bitcointalk.org

Regards,
The Bitcoin Forum Team.

----------------------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder
This is an automated email - Please do not replay.
1511531390
Hero Member
*
Offline Offline

Posts: 1511531390

View Profile Personal Message (Offline)

Ignore
1511531390
Reply with quote  #2

1511531390
Report to moderator
1511531390
Hero Member
*
Offline Offline

Posts: 1511531390

View Profile Personal Message (Offline)

Ignore
1511531390
Reply with quote  #2

1511531390
Report to moderator
1511531390
Hero Member
*
Offline Offline

Posts: 1511531390

View Profile Personal Message (Offline)

Ignore
1511531390
Reply with quote  #2

1511531390
Report to moderator
Join ICO Now Coinlancer is Disrupting the Freelance marketplace!
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1511531390
Hero Member
*
Offline Offline

Posts: 1511531390

View Profile Personal Message (Offline)

Ignore
1511531390
Reply with quote  #2

1511531390
Report to moderator
1511531390
Hero Member
*
Offline Offline

Posts: 1511531390

View Profile Personal Message (Offline)

Ignore
1511531390
Reply with quote  #2

1511531390
Report to moderator
IKnowWhatYouDid
Newbie
*
Offline Offline

Activity: 9


View Profile
November 21, 2014, 05:28:49 PM
 #2

I analyzed the header of the email and this appears to be the source of the spam attack:

https://cdn.anonfiles.com/1416590866573.png
jc01480
Hero Member
*****
Offline Offline

Activity: 756



View Profile
November 23, 2014, 02:51:19 PM
 #3

I received an email several weeks ago from a scammer I'd been corresponding with that he'd hacked the forum's data and retrieved all the email addresses from every user.  I reported it to a certain someone who clearly didn't do a damn thing about it.  This site is apparently as leaky as the US Government.  Better to withhold confidential information throughout.  May or may not be related to this post.

BITCOINDENMARK
Sr. Member
****
Offline Offline

Activity: 253


Blocklancer - Freelance on the Blockchain


View Profile WWW
November 24, 2014, 08:32:13 PM
 #4

I analyzed the header of the email and this appears to be the source of the spam attack:




How did you get that ip ?   I got this from the header; 205.186.168.158

IKnowWhatYouDid
Newbie
*
Offline Offline

Activity: 9


View Profile
November 25, 2014, 11:03:43 AM
 #5

Analyzed the header with whatismyipaddress.com
Great tool by the way.

I don't think this site is compromised. Some people make their emails public and this makes them easy preys for phishing attacks.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!