ClubTread Community

ClubTread Community (https://forums.clubtread.com/)
-   Site Announcements (https://forums.clubtread.com/10-site-announcements/)
-   -   beware of "Club Tread" email scams (https://forums.clubtread.com/10-site-announcements/44958-beware-club-tread-email-scams.html)

pmicheals 05-28-2013 10:05 AM

Longshadow they are sending email's also. I just got one this moment that went to junkmail directly.

Quote:

quote:"Hello pmicheals
You received the following message from: john10 ([email protected])

Hello
Can you assist me to transfer funds into your account and help me to invest in your country or any part of the world. Please let me know so that I can detail you more.

My Regards, John Wei."
If you receive your mail via MSoffice outlook browser, don't open it.


LongShadow 05-28-2013 10:17 AM

This looks like one of the PMs that would have been site generated.

I also just fully reset the server, so their session would be toast as well (just in case still active).





greyowl 05-28-2013 11:00 AM

Quote:

quote:Originally posted by LongShadow

BTW, I think you all would be amazed at how many bots and scammers try to get on to CT. I would say that probably about 30-50% of the acct requests during a given period are not legitimate.
These figures are truly disheartening. They explain why there would be a delay for new registrants to get approved. I don't envy you having to check every application. Good job, don't feel bad about having missed one!

pmicheals 05-28-2013 11:03 AM

I assume the bot is capable of doing a mass profile access and able to get everyone's email address. Is their anyway to hide the email address and still allow the member to send an email like on Craigslist? Maybe it wouldn't help that much.

eg: In profile section
E-mail Address:
Allow Forum Members to Send you E-Mail?: Yes/No (dropbox)
Hide email address from sender? Yes/No (dropbox)

All of your efforts are definitely appreciated longshadow :)




ShadowChaser 05-28-2013 11:34 AM

Quote:

quote:Originally posted by pmicheals

I assume the bot is capable of doing a mass profile access and able to get everyone's email address. Is their anyway to hide the email address and still allow the member to send an email like on Craigslist? Maybe it wouldn't help that much.
Already does, at least initially. The messages are sent from the server, so unless you reply they won't know what your email is.

There are two mitigations that should be added:
* Rate limiting on messages
* The approval system should take email address domain into account.

billdcat 05-28-2013 11:50 AM

You'd think that no one would go for these, but all they need for this stuff to work is one guy in 10,000 for which it hits the right note. I've had to convince people that these things aren't real, so I know there are willing victims out there. Sad.

KARVITK 05-28-2013 12:48 PM

I checked and received none of these. That's good

K

darren 05-28-2013 01:08 PM

Thanks to all the people who emailed us about this. Good work, team!

As for the scam, I worked in fraud at a credit union for years, and I saw seriously educated, smart and resourceful people fall for simple scams. We are not as rational as we might like to think.


FamilyGuy 05-28-2013 01:59 PM

Uh oh. This is a scam? My wife is going to kill me.....again.

19351 05-28-2013 04:57 PM

:DFamily Guy you crack me up !!!

Sadly if people didn't fall for these things they wouldn't be doing it. Send enough out and you are bound to hit a few suckers.

I read a story once where this I.T. guy played along with the spammer for a few weeks. The story had me in howling everytime I read an update. In the end he got the guy arrested by setting up a meeting ...only it was the police he was meeting with.

Farmer 05-28-2013 05:11 PM

There was a goood one like that going on TGR (I think) a while back.

Outlook decided it was spam. I had to check my junk box to see if I made the cut.

LongShadow 05-28-2013 08:19 PM

Thanks all for your understanding and for letting us know!




no quitting 05-28-2013 08:33 PM

I got one but just deleted :) Thanks :)

pmjwright 05-29-2013 09:04 AM

Keep up the great work, Longshadow and moderators!

I get almost-daily emails from RBC, ScotiaBank, HSBC, BMO saying there's a problem with my account and I must reset securities. PayPal too. You've seen them, eh. Yeah, there's a problem with my account all right....I don't have one!!! Ain't gonna fall for that...


All times are GMT -4. The time now is 10:35 PM.

Powered by vBulletin® Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.6.1
User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2021 DragonByte Technologies Ltd.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2021 DragonByte Technologies Ltd.

 
For the best viewing experience please update your browser to Google Chrome