Email Scam

[DragonBlade]

We Admins Will NEVER send an email about ANY hacking problem NOR requesting ANY account information like passwords because we can change that ourselves. Do not even attempt to reply to such emails.

For example,
bleachportal.clubbleachmoderators@hotmail.com

is not even an email for any of our admins, as this person was impersonating Sandal Hat.

A Hacker my ass.

Sample Shitty Email:

From: Hyper Tails <bleachportal.clubbleachmoderators@hotmail.com> <-- lol Sagara BANNED
To: <xxxx@xxx.com>
>Subject: Club Bleach Infraction Warnings
>Date: Fri, 13 Jul 2007 07:11:27 -0400
>
>
>We have recently recieved messages from your account regarding a extreme infraction to our Rules and Terms of Agreement. According to these messages you are the assailant of a hacking problem done to the account: <account name here>. We recieved two messages to our administrators that this account is subject to a hacking problem. Contrary to the typical situation we are informed of, this claim stated that the account that has been hacked is the one that the claimer was using. In the messages sent to us it detailed the vast changes and destruction this hacker has done.

Do not be alarmed with our inquiry though. The person in control of the account claimed that the e-mail address is constantly changed from theirs to the address this message has been sent to. Of course this would interfere with things such as administrator messages, newsletters, and subscribed threads. When we examined our logs of your profile changes we noticed that no e-mail address changes of that no e-mail address changes of the sort that were claimed were apparant. Soon after this we recieved another message requesting that we permanently close the above stated account and transfer all forum stats, points, and references to a brand new account. We are led to believe YOU are not the hacker, and are indeed the true account owner. It seems that a hacker would like a 'boosted' account. We apologize for this inconvenience but we must take proper precautionary measures. In order to be sure you are not the alleged hacker stated in the claims regarding your account we need some basic identifying information.

>If you could provide us with:
>
>The username you use to log in with.
>The exact age you specified you were on our forum.
>Your password.
>And last but most importantly, the approximate times you were logged in yesterday.

>Regretfully if you fail to reply to this message or reply with incorrect information we will have to terminate your account.
>
>With deep apologies,
>
>Sandal Hat, CBM

One culprit so far in CB is named Sagara here, just ignore his ass.

[Mount Gay]

You mean thats not real :o and to think I was about to send off all that information to some random hotmail account. Nice try "hacker" but I was to smart for you!!!!

[Donut]

You mean thats not real :o and to think I was about to send off all that information to some random hotmail account. Nice try "hacker" but I was to smart for you!!!!

OH SNAP!

Thanks for warning me, I was about to send my info!

...>_>

[Shadow-ofDeath]

I feel bad for anyone who falls for it, but really not. That is the oldest trick in the book, along with the other nine thousand oldest tricks in the book.

Just remember: You will most likely never see a website where the administration will ask you for your account information. I'm not 100% sure, but they could probably get at it if they wanted. Only noob hacks (not even hackers, just hacks) try that, if they knew what they were doing they would just send you a file that contained a keylogger in it and then have you log into your account.

That officially makes me a wanted man.

[Que Sera Sera]

Good thing I've changed my email from what I said on my account....
Stupid Scammers!!

[darkangel32]

i see that this guy wass trying to get your points, but why would some one want points that he did not earn. then the system would not be fun any more fore me ad last.
i hope that this not wass to late fore some people.

[Esca]

*cough* Any reason OutLawBankai has 239,699.32 VB points? Found that a tad interesting.

[_Ink]

I got it, but yesterday I was drunk, dunno what the whole wall of text was about, I just removed it. I was thinking this morning "oh shit" but this helped much.

[darkangel32]

did that guy not have so many points before then

[M I Z U]

I never check the mail in the email address I register Forums with after the initial activation.

[Sandal Hat]

Haha, who would believe that I actually typed all that shit out. He should have used a different admin.

[Momo]

lmao, I haven't received that email and I wouldn't believe if Sandal hat put that.. cuz... its too obvious xD

[Dexter]

A Hacker my ass.
bwahaha

Haha, who would believe that I actually typed all that shit out. He should have used a different admin.
roflmao xD
Is it odd I thought that same thing? <_<

joo phail sagararaara

[II Xion II]

I feel bad for anyone who falls for it, but really not. That is the oldest trick in the book, along with the other nine thousand oldest tricks in the book.

Just remember: You will most likely never see a website where the administration will ask you for your account information. I'm not 100% sure, but they could probably get at it if they wanted. Only noob hacks (not even hackers, just hacks) try that, if they knew what they were doing they would just send you a file that contained a keylogger in it and then have you log into your account.

That officially makes me a wanted man.

I hate all those Nigerian Scams and phishing emails, it just gets annoying after a while.

I sometimes like to inform the sender that I am forwarding their messages to the FBI and DoJ and contacting their ISP w/ complete header info...just to be mean! :redbiggri

I never got any said emails, but thanks a lot DB, if it got by my spam filter who knows what might have happened! Oh noes!

[Fearful Shino]

what-- seriously people actually use your yahoo/hotmail to email you? jeez--i wonder if he tried to send it to me, my school might have deleted it by now. Lucky i'm on holiday--you never go onto your school email account during the holidays. Jebus..

[Neve]

xD that email made me laugh. The English is so poor, but they're clearly trying so hard to make it sound official :p

And like Sandal would really end an email with 'With deep apologies' :D

[T_Ichigo]

Well, I've never been exposed to this though, this is quite old for me, but noticing this is not a bad idea, I'll be alert :)

[Tobi]

I would never give away my info anyway.

Thanks for the info though.

[Jenova]

roflmao xD
Is it odd I thought that same thing? <_<

joo phail sagararaara
ROFL
Yeah, doesn't even sound like him >.>

Geez, why go through all that trouble to get into someone else's account?
\autofail

[silverwolf801]

hahahhahaha too bad i never check my email

[Miyagi Rikku]

ROFL
Yeah, doesn't even sound like him >.>
Geez, why go through all that trouble to get into someone else's account?
\autofail

For vbux points I guess.

Silver: rolf same here I got 4 emails or like 6 now and I only check my
email every 5 months XD rofl or when it is needed -.-

[Evanesque]

HA! Someone was so f*cking bored eh?

Nice try..
The guy might've done a better job impersonating DB instead X3
Guess he chose the wrong admin XD

[Neku]

Its amazing how sad some people are, stupid hackers.

I don't think i got the email, i might of and just looked over it and thought that it was a scam... can't remember. But even so as others have said... i doubt Sandal hat would say anything like what was in that email... xD

[DragonBlade]

To get ahold of a moderator account and destroy the forums. He did it to another forum I think

[Dr. Walker]

I'm a Gaian (rich too), so I have to deal with this sort of shit on an almost daily basis.

No matter which forum, what site, so on and so forth, a mod or admin will NEVER NEVER EVER ask another member for their information...simply because they can attain it themselves with a few clicks.

>.>

[jhina]

lol never got the mail, word of advice. No administration anywhere will ask for your password. They have access to that information or would not need it unless they wanted to access your account> The only time anywhere would need a password or passcode is if your request something from them or call them, ect yourself. I feel sorry for anyone who fell victim to this

[♥ Tess]

They have access to that information or would not need it unless they wanted to access your account> The only time anywhere would need a password or passcode is if your request something from them or call them, ect yourself.

Though Forum Administrators do have access to your account, they don't have access to your password (for your security)

That's why if you ever do forget your password, they can't retrieve it for you
(only reset it)**


Keep In Mind:
Even if a Forum Administrator DID ask for your password, that's illegal.
(unless stated in their TOS)
Either way, you should leave those kind of forums immediately since it's probably run by hackers who collect their member's data for personal uses.


**because many people use the same password for Pins or on sites like Paypal, etc...




so yea, that email was ghey =/

[Nicole]

What a douche.

[ocean]

Phail.
i hope no one actually gave up their login...

[Dr. Walker]

What a douche.

You don't know the half of it. :P

*referring to Bleach Aurora*

[Artemis]

I didn't get the email.
Now I feel left out.
j/k

But, despite that, I never would of thought someone would do a scam on a forum. Sounds like too much work for something that doesn't really help you in anyway.

[Esedess]

pffft

Thats old skool, now we have key loggers, i doubt he was doing it seriously, just out of boredom to see how many accounts he can get!

[*kaname*]

That's the way, he got the email-adresses:

HEY FMP!!!
I love FMP!!! Can I have your e-mail to talk to you?!

Lucky, I'm quite inactive atm and didn't answer it ^^.

[II Xion II]

[COLOR="#cc33cc"]

Though Forum Administrators do have access to your account, they don't have access to your password (for your security)

That's why if you ever do forget your password, they can't retrieve it for you
(only reset it)**

Wait! So, even the admins don't have access to our passwords?

Shouldn't the passwords be stored in a database with the usernames and are then only a few SQL statements away for someone who has direct access to the database?

Or do admins not have access to the database? Shows my lack of familiarity with forum software. :redbiggri

I am even more confused.

[♥ Tess]

Wait! So, even the admins don't have access to our passwords?
Shouldn't the passwords be stored in a database with the usernames and are then only a few SQL statements away for someone who has direct access to the database?
Or do admins not have access to the database? Shows my lack of familiarity with forum software. :redbiggri
I am even more confused.

your right :lol

yes, it can be found through the DB's from your host if you have access & know how (and if it's not encrypted)
__
I was mostly referring to account info available through the acp.

[yushin]

i ignore mails like that.
but ofcourse i hafta confirm it on the main site. (probably)

[darkangel32]

your right :lol

yes, it can be found through the DB's from your host if you have access & know how (and if it's not encrypted)
__
I was mostly referring to account info available through the acp.





but only the owner can acces that database and the people he have trusted whit it.

[DragonBlade]

Its probably encrypted, hopefully :3

[Kenta]

Rule #1: use the spellcheck function if you want to sound official.

[Dexter]

Rule #2: If you have to even use spell check, give the fk up.

[II Xion II]

Rule #2: If you have to even use spell check, give the fk up.

QFT!

A quick check of an email can easily reveal whether it is a scam or not.

Bad spellings on easy words should be one major hint, another should be if "with deepest apologies" or anything else "endearing" is put into the email.

Another question: Did the guy/girl who did this use just A hotmail account?

Because as far as I know, hotmail accounts don't reveal the IP sender (at least according to what I've heard).

If they did use an account with header, the IP shouldn't be too much trouble to find and a quick call to the ISP would be in order.

Although the potential for zombie/victim machines and the sheer hassle of such efforts might make it annoying.

[darkangel32]

and i dont no if this is for this site but do this site not have fore there admin and owners a own email adres inplace of hotmail, gmail or any other email site.

[MooL]

Hackers Smellz :<

[Nowitzki]

Rule #2: If you have to even use spell check, give the fk up.

Yeah.. I before E except after C... come on, these guys shoulda known better than that.

[Neve]

Its probably encrypted, hopefully :3They are encrypted, but the encryption only works provided that person is trying to hack in without MySQL (database) access. If anyone got hold of MySQL access, they could really easily get in, because although you can't view encrypted stuff via MySQL, you can still change it (so if I had MySQL access, I couldn't see DB's password, but I could change it to something like 'rawr', and then use that to log in as him).

Although once you have MySQL access, there's not much point in logging in as an admin, since there's a lot more power in MySQL than there is in the Admin CP.

http://img516.imageshack.us/img516/4999/kekeketb8.png

[shomazta]

I never got any said emails, but thanks a lot DB, if it got by my spam filter who knows what might have happened! Oh noes!

Just remember: You will most likely never see a website where the administration will ask you for your account information. I'm not 100% sure, but they could probably get at it if they wanted.

An Admin can't get your actual password, yet they can reset your pass in the ACP then log in with a temp key.

Its probably encrypted, hopefully :3

It is.

Rule #1: use the spellcheck function if you want to sound official.

Rule #2: If you have to even use spell check, give the fk up.

[Cloud]

LOL lNTERNET SPAM LIKE EMAILS TO TAKE MY PASSWORD FTL

[4thseal]

wow, good to know, but also really lame that someone would try to implement such a stupid scam.

[darkangel32]

i do not no how ore why but this guy Juggernaut have only 4 post and 5.000.00 points alredy.

[peacmaker]

This hacker nowing more then a jerk and thanks for heads up.

[..::Mr 999::..]

Uh i just have one e-mail Addres

[.Rik-uh-shey]

i do not no how ore why but this guy Juggernaut have only 4 post and 5.000.00 points alredy.

Yar, new members start off with 5,000 points now.

[darkangel32]

damm noooooooooooo not fair to me damm hehehehehe.

[Esca]

Shouldn't this thread be locked to prevent further spam? I'm surprised it's still open and people are still posting in it.

[aizen-sama]

I noticed your forum didn't like my hotmail address and said I was banned even tho I had never joined the forum until taday.

[dragoneyes001]

I find it funny anyone would send ANY password via e-mail to any site because the only time a password is used is to log in and admins of any site don't need your password EVER. but then again the saying "theres a sucker born every minute" is still valid because so many would.


hey while your at it please enter your credit card number here :_______________ its only for the security of your account. :P

[Vampyrelord]

lol

A rare moment of consensus between dragoneyes and me :p

Suffice to say, the so-called "rational free market" thrives off suckers...

But enough from me, I'm closing this thread to prevent further spammage - as long as everyone is aware that the admins won't contact you via email and ask for your password.