ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Is EE being used to Phish?!?

July 10, 2008 4:41pm

Subscribe [3]
  • #1 / Jul 10, 2008 4:41pm

    ramonekalsaw

    377 posts

    I just received an EE Forums Notification email from ‘[email protected]’ to a thread I’m subscribed to in the Lounge named “Input on harddrive backup strategies”—which should be at http://ellislab.com/forums/viewthread/83281/—but came through as http://ellislab.com/forums/viewreply/426278/ with this included:

    Post Info:

    Title: Input on harddrive backup strategies
    Message:
    DON’T MISS OUT THIS ONE!!!!!!!!

    CLICK HERE AND ENJOY IT
    http://www.subhehogayimamu.com/?um=79

    I got hooked and luckily the “CLICK HERE AND ENJOY IT” link appears to be a harmless flash animation out of India.

    But WHAT THE HECK IS GOING ON if a phisher can so realistically generate a .(JavaScript must be enabled to view this email address) response from the forums? GULP?

  • #2 / Jul 10, 2008 4:55pm

    Ingmar

    29245 posts

    That’s not what’s happening. He posted here in the forum over a dozen times in as many threads, and this is a genuine notification you were getting. It’s just that, in the meantime, we have cleaned up, removed the postings and banned the spammer. Of course we can’t recall the notification emails sent. Makes sense?

  • #3 / Jul 10, 2008 5:44pm

    ramonekalsaw

    377 posts

    That’s not what’s happening. He posted here in the forum over a dozen times in as many threads, and this is a genuine notification you were getting. It’s just that, in the meantime, we have cleaned up, removed the postings and banned the spammer. Of course we can’t recall the notification emails sent. Makes sense?

    Glad to hear that this wasn’t a system breakdown, Whew ... and glad that fellow won’t be showing up in my mailbox anymore :(

    Curious though ... how is that I got informed about a new post in my subscription, but when I clicked on the link in the email it took me to a forum page that told me I didn’t have permission to access that page, and the real subscription page didn’t have his posting there at all?

  • #4 / Jul 10, 2008 5:54pm

    Ingmar

    29245 posts

    how is that I got informed about a new post in my subscription, but when I clicked on the link in the email it took me to a forum page that told me I didn’t have permission to access that page, and the real subscription page didn’t have his posting there at all?

    “No permission” is EE’s polite way of saying that the entry you wanted to see does not exist anymore. In this case, because it has been moved / deleted. Which also explains why there is no more trace of it in the original thead.

  • #5 / Jul 10, 2008 8:13pm

    ramonekalsaw

    377 posts

    ok. Thanks.

  • #6 / Jul 11, 2008 5:03pm

    cjorgensen

    393 posts

    And ramonekalsaw, I’d edit your first post here to take out the link. No need to give the idiot spammers any more exposure than they already generate.

    DON’T MISS OUT THIS ONE!!!!!!!!

    CLICK HERE AND ENJOY IT
    http://www.jackassletters.com

    Off to post this in another 11 threads! (just kidding)

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases