couttsj Posted December 7, 2012 Share Posted December 7, 2012 This is a new one to me. About 8 hours ago I was sent a message entirely in HTML. It got quarantined, but I had to release it find out where it came from. It was configured as a Facebook comment, and simply said: Jim Richards commented on your Wall post. Jim wrote: "you are a thief and your company is sh**" It originated from [196.203.199.20] in Tunesia (probably hijacked), but the links on the page point to a php scri_pt at alternativeswatchers.pro [198.144.183.227] in New York state. I am no expert, but the entire thing looks like a Java applet. More can be seen here: http://www.npinc.ca/more-facebook-related-scams/ Quote Link to comment Share on other sites More sharing options...
petzl Posted December 7, 2012 Share Posted December 7, 2012 This is a new one to me. About 8 hours ago I was sent a message entirely in HTML. It got quarantined, but I had to release it find out where it came from. It was configured as a Facebook comment, and simply said: Jim Richards commented on your Wall post. Jim wrote: "you are a thief and your company is sh**" It originated from [196.203.199.20] in Tunesia (probably hijacked), but the links on the page point to a php scri_pt at alternativeswatchers.pro [198.144.183.227] in New York state. I am no expert, but the entire thing looks like a Java applet. More can be seen here: http://www.npinc.ca/more-facebook-related-scams/ I just log all Facebook and Twitter as spam with Gmail. Find most is, even though it mainly comes from both FB & Twitter. Just read it in Gmail's spam folder which disables links until you release them. Find I don't need to report Gmail spam as their filter is VERY good with little false or positive detections. I don't like them reading mail that passes through Gmail (they call Data mining) Quote Link to comment Share on other sites More sharing options...
couttsj Posted December 13, 2012 Author Share Posted December 13, 2012 They are getting better. This time the email originated in the Netherlands [80.65.97.76], and made it through 2 spam detection systems undetected. The email was again the same derogatory type of Facebook comment entirely in HTML, with a link to a server in the US at ServerGurus [64.250.115.147]. J.A. Coutts Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.