| Visit Our Catalog at SteelGuitarShopper.com |

Post new topic Email Mystery - Possible Hack
Reply to topic
Author Topic:  Email Mystery - Possible Hack
Richard Sinkler


From:
aka: Rusty Strings -- Oakdale, California
Post  Posted 26 Jul 2018 7:05 am    
Reply with quote

Erv Niehouse keeps getting an email with a link that is supposedly from me. It's not. When I right click on my name (as the sender), I get harry.gether@t-online.de.

Since the time before this, I have changed all my passwords. SGF, Facebook, Gmail, Yahoo, ATT Mail, Google, Microsoft, Apple, pretty much everyone.

He seems to be the only one I know who gets the email. Is there any way to see if I got hacked or if he got hacked?
_________________
CLICK HERE to visit my website. & Mickey Adams videos.

Mullen SD12 3p/4k, Carter D10 9p/9k, Peavey Nashville 400 with either a BW1502-4 or a Telonics 15, Hilton VP, Tech 21 Roto Choir, Wampler Euphoria, EH Mel9, Zoom MS50G
View user's profile Send private message Send e-mail Visit poster's website
Wiz Feinberg


From:
Mid-Michigan, USA
Post  Posted 26 Jul 2018 8:14 am    
Reply with quote

The link goes to a fat burning scam page on a compromised website. I see these all the time. They come from the Necurs Botnet.

As for how the spammers captured your name to use in the From field, it's done by harvesting email addresses on compromised computers. People get infected with Trojans. Some of the Trojans drop a spam bot component that scans for user names and email addresses and sends this information home to the bot controller. They compose a list of names and email accounts to send spam to/from, then rent time on a spam botnet.

You can change your passwords on all email accounts and set up 2FA with a smart phone if it is available. That would warn you if somebody else logs into your email server with an unrecognized device or IP address.

As in the former cases of the Nigerian 419 scammers who plagued our forum in the mid-2000s, you are welcome to "forward as attachment" a sample of a scam email. Contact me by PM to arrange this. In the meantime, read my old blog article that explains how display the originating email headers for reporting. It contains a section about forwarding as an attachment and explains why this is necessary. The article is old, but the information is valid.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Acronis True Image | Trend Micro Security | MalwareBytes
View user's profile Send private message Send e-mail Visit poster's website ICQ Number
Jim Cohen


From:
Philadelphia, PA
Post  Posted 26 Jul 2018 8:23 am    
Reply with quote

Wiz Feinberg wrote:
...As in the former cases of the Nigerian 419 scammers who plagued our forum in the mid-2000s...

Come to think of it, I get way fewer emails these days from purported "Barristers" telling me that I have inherited the sum of "Twenty Million US Dollars" and I just need to provide my banking information for them to transfer the funds to me.

How come?
_________________

www.JimCohen.com
www.BeatsWalkin.com
www.RonstadtRevue.com
www.sunfrog.com/PedalSteelThings/Steel-Guitar
View user's profile Send private message Send e-mail Visit poster's website
Richard Sinkler


From:
aka: Rusty Strings -- Oakdale, California
Post  Posted 26 Jul 2018 10:36 am    
Reply with quote

Heck Jim. Send me 20 million through PayPal, and I won't need you banking info. 20 mil will set me up for life and I won't have to steal more from you. Whoa!
_________________
CLICK HERE to visit my website. & Mickey Adams videos.

Mullen SD12 3p/4k, Carter D10 9p/9k, Peavey Nashville 400 with either a BW1502-4 or a Telonics 15, Hilton VP, Tech 21 Roto Choir, Wampler Euphoria, EH Mel9, Zoom MS50G
View user's profile Send private message Send e-mail Visit poster's website
Jim Cohen


From:
Philadelphia, PA
Post  Posted 26 Jul 2018 10:51 am    
Reply with quote

Sure thing Richard. Just PM me your bank account number, password and last 4 of your social security and I'll take care of the rest. Laughing
_________________

www.JimCohen.com
www.BeatsWalkin.com
www.RonstadtRevue.com
www.sunfrog.com/PedalSteelThings/Steel-Guitar
View user's profile Send private message Send e-mail Visit poster's website
Richard Sinkler


From:
aka: Rusty Strings -- Oakdale, California
Post  Posted 26 Jul 2018 11:33 am    
Reply with quote

Jim Cohen wrote:
Sure thing Richard. Just PM me your bank account number, password and last 4 of your social security and I'll take care of the rest. Laughing


Heck, for you I'll even give all of the numbers in my social security number. Or I might send you my actual social security card.
_________________
CLICK HERE to visit my website. & Mickey Adams videos.

Mullen SD12 3p/4k, Carter D10 9p/9k, Peavey Nashville 400 with either a BW1502-4 or a Telonics 15, Hilton VP, Tech 21 Roto Choir, Wampler Euphoria, EH Mel9, Zoom MS50G
View user's profile Send private message Send e-mail Visit poster's website
Jim Cohen


From:
Philadelphia, PA
Post  Posted 26 Jul 2018 11:40 am    
Reply with quote

Richard Sinkler wrote:
Heck, for you I'll even give all of the numbers in my social security number. Or I might send you my actual social security card.

Don't bother, I was just kidding. I already have all that. It came in one of the data packs I purchased a few months ago...
_________________

www.JimCohen.com
www.BeatsWalkin.com
www.RonstadtRevue.com
www.sunfrog.com/PedalSteelThings/Steel-Guitar
View user's profile Send private message Send e-mail Visit poster's website

All times are GMT - 8 Hours
Jump to:  
Please review our Forum Rules and Policies
Our Online Catalog
Strings, CDs, instruction, and steel guitar accessories
www.SteelGuitarShopper.com

Steel Guitar Music
Instrumental steel guitar CDs for your permanent collection
www.SteelGuitarMusic.com

BIAB Styles
Ray Price Shuffles for Band-in-a-Box
by Jim Baron

The Steel Guitar Forum
148 S. Cloverdale Blvd.
Cloverdale, CA 95425 USA

Support This Forum



advertisement