SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 My catcher gets spammed with some html/java - thing

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Mon Sep 20, 2010 3:34 pm Reply with quoteBack to top

There seem to be something new going on - A few days ago I started to get mails with office like subjects and an html attachment.

When attempting to view the attachment as a google document I get this:
Quote:
To display this page you need a browser that supports JavaScript.

Does anybody have an idea what this is all about?

My guess is that it's some kind of worm activity Confused

They're not a big problem - I just delete them.

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
Ima Baeder
419Eater Admin


Joined: 03 May 2007
Posts: 18314


PostPosted: Mon Sep 20, 2010 3:56 pm Reply with quoteBack to top

I've been getting a ton of these for a week or so. They look like accidentally sent emails with an html attachment. One example:

Quote:
Sending my report. Have a great weekend.
Cheers


Don't open the attachments, they're malware.

_________________
348 Fake Sites killed United StatesUnited KingdomUnited NationsMaltaNigeriaGhanaBeninGermanySouth AfricaRussiaTogoMalaysiaEuropean UnionJapanIvory CoastSpainFranceSwitzerlandChinaCanadaItalyThailand

Star Mugu Reseller Mortar Closed lad accounts x 100 Sand Timer 2 Years Pretty Rose Mc Fry Mc Fry Nurse Nastys Audi TT Goat Flying Monkey Easter Egg 2011
View user's profileSend private message
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Mon Sep 20, 2010 4:37 pm Reply with quoteBack to top

I did suspect some kind of worm or malware - So I attempt to open them only as google docs so nothing is executed locally on my computer.

I did take a look at one in a text editor thought, and looks somewhat obfuscated, but I didn't study it that much. The attachments also vary in size so maybe it's some kind of polymorphic stuff.

Maybe a warning to less experienced users would be in it's place.

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
Vampiremerchant
Terrible Joker


Joined: 01 Nov 2009
Posts: 3172
Location: Scotland


PostPosted: Mon Sep 20, 2010 7:26 pm Reply with quoteBack to top

I have been getting these too, I downloaded one, ran a virus check
nothing came up, so I opened it..... Twisted Evil

They are Trojans, luckily my AV caught it

_________________
* Help Keep Eater Running - Click here to donate


Closed lad accounts x 35 Easter Egg

Mortar x 100

Thailand (with thanks to Nigel Tuffnel)
Thailand United Kingdom
Thailand
Thailand
Thailand









My dear Brother , if I have to you to scam you, May the WROGHT of GOD be upon me and my generation
View user's profileSend private messageSend e-mail
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Mon Sep 20, 2010 7:37 pm Reply with quoteBack to top

Maybe I'll take my time to give that java stuff a closer look - For now I just delete them.

The annoying thing is that these make up for more than half of the spam in my catcher Shocked

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
gerald.fird
Baiting Guru


Joined: 24 Mar 2010
Posts: 2058
Location: Ladland


PostPosted: Mon Sep 20, 2010 10:41 pm Reply with quoteBack to top

Sorry. I'm a bit picky. It's Javascript.

_________________
ThailandUnited KingdomSouth AfricaSpainNigeriaUnited StatesGhanaCanadaBahamas, TheBurkina FasoChinaGermanySwitzerland = 309 Mugu Reseller
Closed lad accounts x211 Easter Egg 2013 x36
Cellphone X17
Safari Mrs. CHIPIWA MAZIVA - Johannesburg to Cape Town - 1800 miles round-trip

"IDIOT DEY FOOL YOURSELF........ YOU NON GET WORK DATS WHY U DE FIND FOLLOW UP..... ILLITERATE
TAKE MY ID MAKE U ADD ME

MAKE I SHOW U MY WEBMAIL... U WILL NO DAT AM NOT HUNGRY... HUNGER GO KILL UR GENERATION"
View user's profileSend private message
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Mon Sep 20, 2010 10:44 pm Reply with quoteBack to top

Yup - In an HTML as far as I can see Confused

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Tue Sep 21, 2010 1:58 pm Reply with quoteBack to top

Just got one with this text:
Quote:
Attached is our 30 day Notice. Please confirm you have received our notice. If you have any questions, feel free to contact me anytime.

I guess I'm either fired, homeless or ,the horrors, kicked out of Eater Shocked

Well I've got 30 days to find out - I'm not trying to open that attachment Evil or Very Mad

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
GomerPyle
Pervert Bastard


Joined: 04 Jan 2007
Posts: 8875
Location: Wherever I lay my hat


PostPosted: Tue Sep 21, 2010 10:04 pm Reply with quoteBack to top

I got a whole pile of them and as they were in the format of Lad mail I opened one with an .html attachment.

I immediately knew I'd done wrong and downloaded a free download of malwarebytes and it picked up quite a few nasties - and as a bonus I now have an extra utility.

The moral - html attachments are a 'no no' to open.

I have my gmail account set to filter mails with attachments to trash now so I'm not even tempted.

_________________
Fake sites killed 1 x Australia 9 x United Kingdom 3 x 168 X Closed lad accounts Easter Egg 2011
Pith Helmet - the 'Asparagus Kid' - Accra to Lome - You Must surly Die in The Name Of Jesus Christ
Pith Helmet - Steve - Lagos to Accra
Pith Helmet - Frank - Lagos to Cotonou - co-bait with the vampire
Pith Helmet - Shorty - Lagos to Cotonou - My Agro Base farming where i rearing chicken and other animals was set ablazed overnight and we do not know who is actual behinde all these evils! -
I and my crew was locked up for 3 good days….They wanted to charge us to court but later we are fined an huge amount of money…I asked them why did they arrest the men, they started laughing and saying all sorts mockering words! -
…because now, am left with nothing and remember i told you my Guy (Joe) gave up earlier this morning
View user's profileSend private messageSkype Name
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT