Weird message at newmars.com

Palomar · 2004-05-25 05:15:56

*Hey, I noticed on accessing the New Mars web page today first a nearly completely white screen with a message (in black letters) centered at the top of the page reading: "Ammelie Ownz You" and "Please secure your server." It's followed, beneath, with a quote of Noam Chomsky.

Then the New Mars forums and articles, etc., appears beneath.

Anyone else see this today? Hacker?

--Cindy

GCNRevenger · 2004-05-25 08:48:53

Yep. D*** script kiddies... Maybe a visitor to the Free Chat political threads and got all worked up that somebody disagrees with him/her/it.

Rxke · 2004-05-25 15:31:15

You think that's bad? take a look at AresArise.com (a.k.a. Outpost 8 forum)

http://www.aresarise.com/Outpost8/]hacked...

Adrian · 2004-05-25 16:53:03

It's really quite annoying. I imagine they exploited a hole in Ikonboard or Moveable Type. In any case, minimal damage, fixed now.

Josh Cryer · 2004-05-25 17:26:22

Did you bork out how they actually got in? Would be good to close up any holes so no other kiddies could pull the same thing.

Shaun Barrett · 2004-05-27 18:56:27

WARNING!!

I have just informed Adrian, for a second time, that somebody is sending me virus-infected emails with his name on them.

Make sure your anti-virus software is up to date and BEWARE!

Josh Cryer · 2004-05-27 19:14:02

With Adrian's name on them? Could you be more specific? Could be a coincidence... I get a lot of virus email (in fact, viruses are the majority of spam that I recieve), sometimes the name is similar to people I know (but the email address is never the same). Is the return email address the same as Adrains?

Just asking these questions because Adrian is going to be away for a bit. If he is infected, I don't think he can do much about it, but I reckon I (and others here) would've got one too...

Shaun Barrett · 2004-05-28 04:05:34

Hi Josh.
I delete these things as soon as I can - viruses make me nervous - so I don't have it in front of me at the moment. But it was from Adrian@newmars.com.

What do you make of it? ???

Palomar · 2004-05-28 05:20:37

Hi Josh.
I delete these things as soon as I can - viruses make me nervous - so I don't have it in front of me at the moment. But it was from Adrian@newmars.com.
What do you make of it? ???

*Someone's created a domain name (?) -- not sure that's the correct term. I've seen this on Usenet (a good place to stay AWAY from, IMO) quite frequently...people can create special e-mail names like "Ihate----{fill in specific name}@kissmybackside.com" -- ANYTHING they want to name it (before and after the "@"), they can.

I have lately been receiving UNmarked e-mail; it just shows up as "[none]" in the Subject Line portion of the e-mail and there is absolutely *no* designation for the sender. How that happens I have no idea. But anyway, I've -not- received any e-mail similar to what Shaun's getting.

I have a hunch it may be a disgruntled person Adrian recently banned and whose threads he deleted (said person will go unnamed by me...). But it'd be ironic if it is that person, because I don't remember Shaun interacting with him at all.

Just my speculation.

--Cindy

Shaun Barrett · 2004-05-28 05:53:41

Interesting input, Cindy.
Thanks for the information.
There are certainly some very sick puppies out there!

Palomar · 2004-05-28 06:30:02

There are certainly some very sick puppies out there!

*I'll say.

BTW, if Adrian kept (for whatever reason) any private exchanges he had with that guy and if there's a way to open a letter from whoever is posing as Adrian *without* opening the virus attachment itself, one could compare ISP numbers...if they match, culprit caught.

--Cindy

Josh Cryer · 2004-05-28 12:33:23

There are two possiblities I can think of, the first being that Adrian got infected and a virus went out to everyone in his contacts (I think this is unlikely as I would've gotten one from him, I think; or at least others here would've). Or a spammer harvested all the email addresses on this site that they could find (the front page comments do have some of our email addresses- I usually put in fakeshemp-withan-s.com instead of my actual address, I assume people can figure it out, almost certain that's how our friend Cindy is mentioning got my email address), and chose the web admin's address as the "sent from," because that could be pretty darn convincing to unsuspecting users. "Whoa, Adrian is emailing me, this must be important!"

It would've been nice to have gotten the IP. If it (a virus with the "sent from" field indicating adrian@newmars.com) happens again, export the mail to an .eml if you use outlook Shaun, I would enjoy looking at the headers, heh. Be careful out there, though.

dicktice · 2004-05-28 15:42:00

Did you bork out how they actually got in? Would be good to close up any holes so no other kiddies could pull the same thing.

Please explain "bork out" to the jargon-deprived contributors amongst us.

Mundaka · 2004-05-28 16:44:28

Shaun Barrett · 2004-05-28 23:00:58

Thanks for the advice, Josh. And I'd be happy to comply if only I had any idea what you're talking about!

I've never heard of a ".eml" and wouldn't have a clue how to export my mail to it. Nor do I know why I'd even want to! ... Though I'm sure it must be the sensible thing to do.
And I'm sure looking at "headers" would be very revealing in this matter but I'm at a loss to understand why, since I don't know what they are.

I'm sure it's all quite simple if you know the jargon and have a mental picture of how the system works. Unfortunately, I'm in the dark on both counts!

My last computer was so messed up with viruses I just junked it and started again.
That's why, if my anti-virus software warns me I'm under attack, I tend to delete almost everything in sight, unopened, and ask questions later! Crude, I admit, but so far very effective.

[P.S. Josh, I do appreciate your attempts to help all of us understand what's going on with these viral attacks on me. Any sarcasm in the above post is levelled only at my own ineptitude with computers and not at anyone else - certainly not you.
P.P.S. I have to admit, along with Dicktice, I'm also curious as to the origin of the term "bork out". I'm familiar with the British expression "suss out", which I suspect means the same thing, and which I've always assumed was based on a bastardisation of one of the tenses of the French verb, 'savoir', to know(?) ]

Mundaka · 2004-05-29 01:06:49

Josh Cryer · 2004-05-29 13:35:25

Ahh, "bork" is just an invention of myself. I just meant "figure out."

Mundaka · 2004-05-29 17:29:36

New Mars Forums

Announcement

#1 2004-05-25 05:15:56

Re: Weird message at newmars.com

#2 2004-05-25 08:48:53

Re: Weird message at newmars.com

#3 2004-05-25 15:31:15

Re: Weird message at newmars.com

#4 2004-05-25 16:53:03

Re: Weird message at newmars.com

#5 2004-05-25 17:26:22

Re: Weird message at newmars.com

#6 2004-05-27 18:56:27

Re: Weird message at newmars.com

#7 2004-05-27 19:14:02

Re: Weird message at newmars.com

#8 2004-05-28 04:05:34

Re: Weird message at newmars.com

#9 2004-05-28 05:20:37

Re: Weird message at newmars.com

#10 2004-05-28 05:53:41

Re: Weird message at newmars.com

#11 2004-05-28 06:30:02

Re: Weird message at newmars.com

#12 2004-05-28 12:33:23

Re: Weird message at newmars.com

#13 2004-05-28 15:42:00

Re: Weird message at newmars.com

#14 2004-05-28 16:44:28

Re: Weird message at newmars.com

#15 2004-05-28 23:00:58

Re: Weird message at newmars.com

#16 2004-05-29 01:06:49

Re: Weird message at newmars.com

#17 2004-05-29 13:35:25

Re: Weird message at newmars.com

#18 2004-05-29 17:29:36

Re: Weird message at newmars.com

Board footer