Author Topic: Spam on my email address soley used here.  (Read 24450 times)

0 Members and 1 Guest are viewing this topic.

Offline Kilia

  • Full Member
  • ***
  • Posts: 145
  • Going from here to there on my computer
Re: Spam on my email address soley used here.
« Reply #60 on: April 01, 2012, 07:37:39 PM »
Don't you just love deadlines... Mind you this really is an earthshattering event
I just love your wit, essexboy. Carry on. ;-)

Online bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44709
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Spam on my email address soley used here.
« Reply #61 on: April 01, 2012, 07:51:43 PM »
It's an extra power bestowed to all  Überevangelist on April 1st.  ;D ;D ;D
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v20H2 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32903
  • malware fighter
Re: Spam on my email address soley used here.
« Reply #62 on: April 01, 2012, 08:18:06 PM »
What is the percentage of this thread that we could consider to be content-spam of some sort?
Why did the OP not have Mailwasher free installed (yes it is still available) on his machine?
He would have missed any reason for posting his glorious thread
as he would never have seen this spam message in the first place,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Kilia

  • Full Member
  • ***
  • Posts: 145
  • Going from here to there on my computer
Re: Spam on my email address soley used here.
« Reply #63 on: April 01, 2012, 08:34:01 PM »
What is the percentage of this thread that we could consider to be content-spam of some sort?
Why did the OP not have Mailwasher free installed (yes it is still available) on his machine?
He would have missed any reason for posting his glorious thread
as he would never have seen this spam message in the first place,

polonus
Love my Mailwasher!
Have used it for many years now.... no problems!

Online bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44709
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Spam on my email address soley used here.
« Reply #64 on: April 01, 2012, 08:56:14 PM »
What is the percentage of this thread that we could consider to be content-spam of some sort?
Why did the OP not have Mailwasher free installed (yes it is still available) on his machine?
He would have missed any reason for posting his glorious thread
as he would never have seen this spam message in the first place,

polonus

MailWasher allows you to delete spam at the server. You still get to see the spam prior to it's deletion.
If there truly is a targeted attack, I'd also like to know about it. Even if I've never received anything from this or any other forum.
I've used MailWasher Pro for many years and am very happy with the program despite a current problem with their registration.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v20H2 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Stalka

  • Newbie
  • *
  • Posts: 4
Re: Spam on my email address soley used here.
« Reply #65 on: April 02, 2012, 03:12:15 AM »
It is interesting to see loyal forum members jumping to the defense on this issue, dismissing it as non-news-worthy and deflecting discussion ... when the evidence clearly shows that the e-mail database has been compromised, you don't really seem to care. How much further did the attacker delve? What other personal information is on this server?

In all likelihood, the forum software is separate from everything else, after all this is a security firm, they know what they are doing.

The sad fact is that forum software gets exploited all the time, its damn-near inevitable. I always treat pre-packaged web software as a possible attack vector and design a system keeping that in mind, I'm sure Avast! did the same thing.

I have received 2 emails of spam, however trivial that may be. But this is your forum. We were here to simply notify you of a problem, I don't think there is much need in defending against it, as it was meant to be HELPFUL.

Offline FlyingRobot

  • Full Member
  • ***
  • Posts: 105
Re: Spam on my email address soley used here.
« Reply #66 on: April 02, 2012, 05:06:26 AM »
...Its the distinct lack of response by the AVAST webmaster that concerns me...

One thing I do like to see is an indication that the first hurdle ("there is no good reason to believe this could be due to an issue on our end") has been cleared.  The larger and/or less technical the company, the more likely it is that the recipient unique email address aspect will be overlooked.  My feeling is that hurdle is past us, but I can't point to anything which proves it.

Given avast's industry and the massive amounts of sensitive information they receive, I would expect them to seed ALL of their databases with non-obvious account information so that they themselves can monitor for leaks.  That's on top of continuously inspecting their systems for exploit weaknesses, malicious code, signs of intrusion, etc.  Of course, very many companies you would expect to be using absolute top notch approaches have been found to have vulnerabilities and often even totally inexcusable ones. 

In a way, even something like this IS a HUGE deal when you can't bound it.  Spam to a recipient unique email address is usually the first sign that someone has acquired information that they shouldn't have.  The important question is: what ELSE was acquired?  You don't know though... and you may never fully know.  Obviously, one possibility which is strong in some cases is that a recipient company database was compromised.  For all you know, that database *and other databases* were compromised.  Every bit of information you have ever given the company or it has collected somehow about you may be compromised.  Even if other databases weren't directly compromised, they could be indirectly so.  For example, where a forum exploit somehow acquired user/pass and the user foolishly used that same user/pass on another type of account with the same company.  Technically speaking, you don't even know what to do with regards to changing passwords, etc on accounts because the exploit could still be in place.  Such is the cold, hard, factual, reality of the situation.  Most would, for whatever reason, think positively and assume least worse case.  From a practical point of view that is understandable.  From a technical point of view that is absolutely wrong; you SHOULD assume worst case.  Those that are security/privacy conscious will naturally want to do the technically best thing but it is a nightmare to do so.  We haven't even gotten to other possibilities yet, so the cascade or avalanche of possibilities and what is necessary to very properly respond to them gets even worse.

So I think it is quite good, and in fact probably a sign of proper thinking, when someone gets upset about even something like this.  Thing is, you also have to try to remain somewhat patient and give the company time to carefully review everything it SHOULD be carefully reviewing.  I don't know when this started, but it sounds to me as though it has only been several days since the first report.  Maybe the thing to do is give avast some more time to investigate and respond to customers/users?  I don't know what others think reasonable, but my feeling at this point is that if a few weeks go by without a reasonable response from avast, then no matter how you slice/dice it the company just doesn't care about its customers/users.  I personally don't expect a company to disclose everything, and I always question whether they are disclosing everything they should be.  What is a "reasonable response" is difficult to pin down, but that's a bridge that can be crossed if/when we get to it. 


« Last Edit: April 02, 2012, 05:08:14 AM by FlyingRobot »

Offline cod head

  • Sr. Member
  • ****
  • Posts: 254
Re: Spam on my email address soley used here.
« Reply #67 on: April 02, 2012, 02:15:18 PM »
Seems very strange that only a limited number of fairly new forum members are recieving this spam, i myself have recieved general spam not related to avast but similar to what others have mentioned here in content so it could just be random i believe and the other point to look at is did any of these new members have there email showing when they first joined the forum  ??? as if so they would have been easly harvested.
[/quote

I received exactly one Spam e mail of the type discussed.So I agree.Its not the usual spam.

« Last Edit: April 02, 2012, 02:17:12 PM by cod head »
Win 7 Home Premium 64 bit,Avast Free,Superantspyware Free,Malwarebytes Pro Winpatrol Pro,Spywareblaster Free.

Offline exocet

  • Jr. Member
  • **
  • Posts: 21
Re: Spam on my email address soley used here.
« Reply #68 on: April 02, 2012, 04:08:27 PM »
Happy Monday folks, I may be a new member but not a new forum user and when I signed up the first thing was privacy, I run 7 forums using the same core software as this one, so its not because it was open, it was because there is low security in Avast forums and a breach that has not been addressed or positively responded to.

My Company has return copies of Avast products as we are now supplying another product and withdraw support for Avast product to our users, they now must use Avast support or rid them selves of it.

Had Avast responded in a timely and positive manner regarding the initial post we would still be selling and supporting their products.

Offline cod head

  • Sr. Member
  • ****
  • Posts: 254
Re: Spam on my email address soley used here.
« Reply #69 on: April 03, 2012, 01:22:39 PM »
This is Lonely Girls e mail address.May she get spammed.

chandler1122lio@yahoo.com
Win 7 Home Premium 64 bit,Avast Free,Superantspyware Free,Malwarebytes Pro Winpatrol Pro,Spywareblaster Free.

Online CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11074
  • No support PM's thanks
Re: Spam on my email address soley used here.
« Reply #70 on: April 03, 2012, 01:33:15 PM »
This is Lonely Girls e mail address.May she get spammed.

chandler1122lio@yahoo.com
That would be a very stupid move ::) as once you've spammed in return they'll have have positive reply with your address included and you'll start recieving thousands of spam :o

Online bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44709
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Spam on my email address soley used here.
« Reply #71 on: April 03, 2012, 02:04:46 PM »
This is Lonely Girls e mail address.May she get spammed.

chandler1122lio(@)yahoo.com

That's as smart a move as they guy that advertised his Soc. Sec. Number and dared any one to steal his identity.
He no longer runs that advertisement.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v20H2 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84429
  • No support PMs thanks
Re: Spam on my email address soley used here.
« Reply #72 on: April 03, 2012, 02:15:06 PM »
This is Lonely Girls e mail address.May she get spammed.
<snip>

Since most from addresses in spam aren't the users but some harvested email address, by publishing it in the hope that it gets harvested isn't very smart, just potentially contributing to the spam out there flooding email servers.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.10.2442 (build 20.10.5824.618) UI-1.0.591/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline exocet

  • Jr. Member
  • **
  • Posts: 21
Re: Spam on my email address soley used here.
« Reply #73 on: April 08, 2012, 05:49:31 PM »
I don’t use mail washer or any other kind of mail filters, as this would then mask a problem as and when one exists, like now. The lonely girl email was used to send to other spammers (failed spammers on my own forums) and they can sort it out among themselves. No my email address want  used. The original complaint was made on the 30th march 2012, response to that complain has yet to be made (A simple “we will look into this” or whatever would have bought them time).

In fact the only response was to reply #8. This is what has irritated me to the point this is a bigger issue of ignoring a problem than the problem itself.

I and my company no longer use or promote Avast products any longer over this apparent burying of heads in the sandbox.

As for unique and strong passwords here is one that has just been discarded and replaced with another (M3nl1k3t0os3eth3d0lph1n5sw1m =  menliketoseethedophinsswim).

The fault wherever it may be, database, forums software, cloud, host, whatever, it’s still Avast's responsibility to care to its users, so far I have witnessed no such action.

Happy Easter everyone.
« Last Edit: April 10, 2012, 04:26:43 AM by exocet »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32903
  • malware fighter
Re: Spam on my email address soley used here.
« Reply #74 on: April 08, 2012, 06:01:11 PM »
Hi exocet,

You probably will not see them swim, I mean in
Quote
menliketoseethedoplinsswim
. I do not know what a "doplin" is.
If you are that careful with and critical towards your data you should be the first one they complain about,

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!