Reporting spam
Moderators: winston, another_commander, Cody
On the miniscule possibility nobody has noticed...
...the boards are being spam-flooded with a link that tries to install a Windows executable. Which is odd, as I'd expect 99% of everyone here to use Macs or Linux.
In either case, I hereby petition the GalCops to classify the originating offender as a Fugitive, but would still like to know if the trojan is being used to add more spam to the boards through compromised accounts (browser defect) or if it's a server glitch that is being exploited.
(This is important. If it's the former, then as soon as those individuals clean their systems and change their passwords, things'll be fine. If it's a system problem, and that's why we're seeing so many different "users" posting, then everyone should treat their password as compromised and change it as soon as the problem is fixed.)
In either case, I hereby petition the GalCops to classify the originating offender as a Fugitive, but would still like to know if the trojan is being used to add more spam to the boards through compromised accounts (browser defect) or if it's a server glitch that is being exploited.
(This is important. If it's the former, then as soon as those individuals clean their systems and change their passwords, things'll be fine. If it's a system problem, and that's why we're seeing so many different "users" posting, then everyone should treat their password as compromised and change it as soon as the problem is fixed.)
- Uncle Reno
- ---- E L I T E ----
- Posts: 648
- Joined: Mon Apr 24, 2006 12:54 pm
- Location: UK
*
https://bb.oolite.space/profile.php?mode ... ile&u=1607
posted
https://bb.oolite.space/viewtopic.php?p= ... ght=#31636
https://bb.oolite.space/viewtopic.php?p= ... ght=#31635
https://bb.oolite.space/viewtopic.php?p= ... ght=#31634
https://bb.oolite.space/viewtopic.php?p= ... ght=#31633
https://bb.oolite.space/viewtopic.php?p= ... ght=#31632
https://bb.oolite.space/viewtopic.php?p= ... ght=#31631
https://bb.oolite.space/viewtopic.php?p= ... ght=#31630
https://bb.oolite.space/viewtopic.php?p= ... ght=#31629
https://bb.oolite.space/viewtopic.php?p= ... ght=#31628
https://bb.oolite.space/viewtopic.php?p= ... ght=#31627
https://bb.oolite.space/viewtopic.php?p= ... ght=#31626
https://bb.oolite.space/viewtopic.php?p= ... ght=#31624
https://bb.oolite.space/viewtopic.php?p= ... ght=#31623
https://bb.oolite.space/viewtopic.php?p= ... ght=#31622
https://bb.oolite.space/viewtopic.php?p= ... ght=#31621
https://bb.oolite.space/viewtopic.php?p= ... ght=#31620
https://bb.oolite.space/viewtopic.php?p= ... ght=#31619
Probably duplicates other peoples spam spotting but is the whole set for this bot.
https://bb.oolite.space/profile.php?mode ... ile&u=1607
posted
https://bb.oolite.space/viewtopic.php?p= ... ght=#31636
https://bb.oolite.space/viewtopic.php?p= ... ght=#31635
https://bb.oolite.space/viewtopic.php?p= ... ght=#31634
https://bb.oolite.space/viewtopic.php?p= ... ght=#31633
https://bb.oolite.space/viewtopic.php?p= ... ght=#31632
https://bb.oolite.space/viewtopic.php?p= ... ght=#31631
https://bb.oolite.space/viewtopic.php?p= ... ght=#31630
https://bb.oolite.space/viewtopic.php?p= ... ght=#31629
https://bb.oolite.space/viewtopic.php?p= ... ght=#31628
https://bb.oolite.space/viewtopic.php?p= ... ght=#31627
https://bb.oolite.space/viewtopic.php?p= ... ght=#31626
https://bb.oolite.space/viewtopic.php?p= ... ght=#31624
https://bb.oolite.space/viewtopic.php?p= ... ght=#31623
https://bb.oolite.space/viewtopic.php?p= ... ght=#31622
https://bb.oolite.space/viewtopic.php?p= ... ght=#31621
https://bb.oolite.space/viewtopic.php?p= ... ght=#31620
https://bb.oolite.space/viewtopic.php?p= ... ght=#31619
Probably duplicates other peoples spam spotting but is the whole set for this bot.
"Get back or I unleash my lethal spotted batoid!!"
What I do when not reading the Oolite bulletin board!
What I do when not reading the Oolite bulletin board!
- Magus Zeal
- Above Average
- Posts: 24
- Joined: Sun Feb 18, 2007 8:48 am
- Contact:
Unfortunatly, Killer Wolf, the only one who has the power to install that sort of stuff is not available right now. He'd have to be contacted personally then step in to do this.
I plan on taking the spammer's tools away. These spammers are from zombies, and all I have to do is send some sanctions to the ISPs of the zombies and there goes their service. Then I can (try) to complain to the hosting company of the "websites" and see if I can get them shut down -- but they're located in the Ukraine, which might mean my complaints would get laughed at.
I plan on taking the spammer's tools away. These spammers are from zombies, and all I have to do is send some sanctions to the ISPs of the zombies and there goes their service. Then I can (try) to complain to the hosting company of the "websites" and see if I can get them shut down -- but they're located in the Ukraine, which might mean my complaints would get laughed at.
- Uncle Reno
- ---- E L I T E ----
- Posts: 648
- Joined: Mon Apr 24, 2006 12:54 pm
- Location: UK
*
https://bb.oolite.space/profile.php?mode ... ile&u=1604
posted
https://bb.oolite.space/viewtopic.php?p= ... ght=#31616
https://bb.oolite.space/viewtopic.php?p= ... ght=#31615
https://bb.oolite.space/viewtopic.php?p= ... ght=#31614
https://bb.oolite.space/viewtopic.php?p= ... ght=#31613
https://bb.oolite.space/viewtopic.php?p= ... ght=#31611
https://bb.oolite.space/viewtopic.php?p= ... ght=#31610
https://bb.oolite.space/viewtopic.php?p= ... ght=#31609
https://bb.oolite.space/viewtopic.php?p= ... ght=#31608
https://bb.oolite.space/viewtopic.php?p= ... ght=#31606
https://bb.oolite.space/viewtopic.php?p= ... ght=#31605
https://bb.oolite.space/viewtopic.php?p= ... ght=#31604
https://bb.oolite.space/viewtopic.php?p= ... ght=#31602
Again probable duplication but the whole set.
https://bb.oolite.space/profile.php?mode ... ile&u=1604
posted
https://bb.oolite.space/viewtopic.php?p= ... ght=#31616
https://bb.oolite.space/viewtopic.php?p= ... ght=#31615
https://bb.oolite.space/viewtopic.php?p= ... ght=#31614
https://bb.oolite.space/viewtopic.php?p= ... ght=#31613
https://bb.oolite.space/viewtopic.php?p= ... ght=#31611
https://bb.oolite.space/viewtopic.php?p= ... ght=#31610
https://bb.oolite.space/viewtopic.php?p= ... ght=#31609
https://bb.oolite.space/viewtopic.php?p= ... ght=#31608
https://bb.oolite.space/viewtopic.php?p= ... ght=#31606
https://bb.oolite.space/viewtopic.php?p= ... ght=#31605
https://bb.oolite.space/viewtopic.php?p= ... ght=#31604
https://bb.oolite.space/viewtopic.php?p= ... ght=#31602
Again probable duplication but the whole set.
"Get back or I unleash my lethal spotted batoid!!"
What I do when not reading the Oolite bulletin board!
What I do when not reading the Oolite bulletin board!
- Uncle Reno
- ---- E L I T E ----
- Posts: 648
- Joined: Mon Apr 24, 2006 12:54 pm
- Location: UK
*
https://bb.oolite.space/profile.php?mode ... ile&u=1609
posted
https://bb.oolite.space/viewtopic.php?p= ... ght=#31646
https://bb.oolite.space/profile.php?mode ... ile&u=1609
posted
https://bb.oolite.space/viewtopic.php?p= ... ght=#31646
"Get back or I unleash my lethal spotted batoid!!"
What I do when not reading the Oolite bulletin board!
What I do when not reading the Oolite bulletin board!
- Uncle Reno
- ---- E L I T E ----
- Posts: 648
- Joined: Mon Apr 24, 2006 12:54 pm
- Location: UK
*
https://bb.oolite.space/profile.php?mode ... ile&u=1610
posted
https://bb.oolite.space/viewtopic.php?p=31648#31648
https://bb.oolite.space/viewtopic.php?p=31657#31657
https://bb.oolite.space/viewtopic.php?p=31661#31661
https://bb.oolite.space/viewtopic.php?p=31658#31658
https://bb.oolite.space/viewtopic.php?p=31659#31659
https://bb.oolite.space/viewtopic.php?p=31660#31660
https://bb.oolite.space/viewtopic.php?p=31664#31664
https://bb.oolite.space/viewtopic.php?p=31667#31667
https://bb.oolite.space/viewtopic.php?p=31654#31654
https://bb.oolite.space/viewtopic.php?p=31655#31655
https://bb.oolite.space/viewtopic.php?p=31666#31666
https://bb.oolite.space/viewtopic.php?p=31649#31649
https://bb.oolite.space/viewtopic.php?p=31652#31652
https://bb.oolite.space/viewtopic.php?p=31663#31663
https://bb.oolite.space/viewtopic.php?p=31665#31665
https://bb.oolite.space/viewtopic.php?p=31668#31668
https://bb.oolite.space/viewtopic.php?p=31669#31669
OK, I think I've missed one post but at the moment I don't care!
I'm now making a run for it down the towers escape tunnel.....
https://bb.oolite.space/profile.php?mode ... ile&u=1610
posted
https://bb.oolite.space/viewtopic.php?p=31648#31648
https://bb.oolite.space/viewtopic.php?p=31657#31657
https://bb.oolite.space/viewtopic.php?p=31661#31661
https://bb.oolite.space/viewtopic.php?p=31658#31658
https://bb.oolite.space/viewtopic.php?p=31659#31659
https://bb.oolite.space/viewtopic.php?p=31660#31660
https://bb.oolite.space/viewtopic.php?p=31664#31664
https://bb.oolite.space/viewtopic.php?p=31667#31667
https://bb.oolite.space/viewtopic.php?p=31654#31654
https://bb.oolite.space/viewtopic.php?p=31655#31655
https://bb.oolite.space/viewtopic.php?p=31666#31666
https://bb.oolite.space/viewtopic.php?p=31649#31649
https://bb.oolite.space/viewtopic.php?p=31652#31652
https://bb.oolite.space/viewtopic.php?p=31663#31663
https://bb.oolite.space/viewtopic.php?p=31665#31665
https://bb.oolite.space/viewtopic.php?p=31668#31668
https://bb.oolite.space/viewtopic.php?p=31669#31669
OK, I think I've missed one post but at the moment I don't care!
I'm now making a run for it down the towers escape tunnel.....
"Get back or I unleash my lethal spotted batoid!!"
What I do when not reading the Oolite bulletin board!
What I do when not reading the Oolite bulletin board!
- Killer Wolf
- ---- E L I T E ----
- Posts: 2280
- Joined: Tue Jan 02, 2007 12:38 pm
ah, ok. i thought mebbes a few of the admin types who delete the posts would be able to alter settings etc.Magus Zeal wrote:Unfortunatly, Killer Wolf, the only one who has the power to install that sort of stuff is not available right now. He'd have to be contacted personally then step in to do this.
I plan on taking the spammer's tools away. These spammers are from zombies, and all I have to do is send some sanctions to the ISPs of the zombies and there goes their service. Then I can (try) to complain to the hosting company of the "websites" and see if I can get them shut down -- but they're located in the Ukraine, which might mean my complaints would get laughed at.
the board on my side (by boardstogo) introduced the security word thing for posts, where you have to type in a random code generated by the board, had a search on php but i couldn't see any MODs like this, sadly :-(
anyways, cheers in advance for anything you manage to do to cut down this rubbish :-)
- Uncle Reno
- ---- E L I T E ----
- Posts: 648
- Joined: Mon Apr 24, 2006 12:54 pm
- Location: UK
Yet another bot that has posted lots of spam
https://bb.oolite.space/profile.php?mode ... ile&u=1612
"Get back or I unleash my lethal spotted batoid!!"
What I do when not reading the Oolite bulletin board!
What I do when not reading the Oolite bulletin board!
- Killer Wolf
- ---- E L I T E ----
- Posts: 2280
- Joined: Tue Jan 02, 2007 12:38 pm
- Captain Hesperus
- Grand High Clock-Tower Poobah
- Posts: 2310
- Joined: Tue Sep 19, 2006 1:10 pm
- Location: Anywhere I can sell Trumbles.....
https://bb.oolite.space/profile.php? ... ile&u=1613
For what it's worth. He'll probably be back two minutes after he's deleted.
:sigh:
<P.S.> here's his crap.
https://bb.oolite.space/viewtopic.ph ... ght=#31710
Captain Hesperus
"Despondancy is a crack sniper with a loaded rifle and ammo to spare in a high tower that, unbeknownst to him, has had all the uppermost windows bricked up to prevent pigeons getting in."
For what it's worth. He'll probably be back two minutes after he's deleted.
:sigh:
<P.S.> here's his crap.
https://bb.oolite.space/viewtopic.ph ... ght=#31710
Captain Hesperus
"Despondancy is a crack sniper with a loaded rifle and ammo to spare in a high tower that, unbeknownst to him, has had all the uppermost windows bricked up to prevent pigeons getting in."
- JensAyton
- Grand Admiral Emeritus
- Posts: 6657
- Joined: Sat Apr 02, 2005 2:43 pm
- Location: Sweden
- Contact:
Already got that.Killer Wolf wrote:had a bit more trawl of php, maybe a mod/admin could scope these out??
TIPS
Set activation to 'user' or 'admin'
Already got that.Killer Wolf wrote:Enable visual confirmation
Already got that.Killer Wolf wrote:Disable guest posting
Looking into those.Killer Wolf wrote:MODS
E-mail: [email protected]
- JensAyton
- Grand Admiral Emeritus
- Posts: 6657
- Joined: Sat Apr 02, 2005 2:43 pm
- Location: Sweden
- Contact:
Re: On the miniscule possibility nobody has noticed...
Neither. The bots are registering new accounts and using those. The only defences stock phpBB has are e-mail confirmation (not a problem with so many free e-mail hosts) and a weak CAPTCHA.imipak wrote:...the boards are being spam-flooded with a link that tries to install a Windows executable. Which is odd, as I'd expect 99% of everyone here to use Macs or Linux.
In either case, I hereby petition the GalCops to classify the originating offender as a Fugitive, but would still like to know if the trojan is being used to add more spam to the boards through compromised accounts (browser defect) or if it's a server glitch that is being exploited.
As for the Windows executable, there’s no oddness. The botnets don’t care what the board is about, they just look for phpBBs.
E-mail: [email protected]
- Captain Hesperus
- Grand High Clock-Tower Poobah
- Posts: 2310
- Joined: Tue Sep 19, 2006 1:10 pm
- Location: Anywhere I can sell Trumbles.....
*
https://bb.oolite.space/profile.php?mode ... ile&u=1604
<ka-chik> BOOOOOOOOMM!!
Not on my watch!
Capt'n H
https://bb.oolite.space/profile.php?mode ... ile&u=1604
<ka-chik> BOOOOOOOOMM!!
Not on my watch!
Capt'n H
*
He's making fun of me! Darn Spambot!
https://bb.oolite.space/viewtopic.php?t=3196
https://bb.oolite.space/profile.php?mode ... ile&u=1605
He's making fun of me! Darn Spambot!
https://bb.oolite.space/viewtopic.php?t=3196
https://bb.oolite.space/profile.php?mode ... ile&u=1605