Forum Home
Press F1
Thread ID: 135706	2013-12-03 02:58:00	Bogus emails	Mike S (1766)	Press F1

Post ID	Timestamp	Content	User
1361547	2013-12-03 02:58:00	Mine is an xtra.co.nz email address. Twice, now, I've received email messages purportedly from people I know, that they have not in fact sent. On those emaols other recipients are shown as well - and those are actual email addresses that the senders know and use (incidentally, some are known to me,as well). The messasge subject in both cases is "greetings!". Curiously, each message is just a web address - and it's printed twice in normal and seriffed type face. It is paydayloanhelp.info - but if you load that into a web browser and click on it, it instantly changes to soemthing different (at which point I get to hell out of it), but it doesn't appear to open a web site. Obviously we'd like to stop these bogus messages: everybody worries when people think they've done something they haven't. Can anybody shed any light on this (potentially dangerous??!!) anomally, please. And how do we stop these messages? Mike S	Mike S (1766)
1361548	2013-12-03 03:11:00	1)Run antimalware scans on the PCs, this should be a weekly thing anyway. 2)Don't click on these emails or open them even, just delete, they usually contain malware of some kind. 3)Ditch Xtra as an email provider and use something reliable, and safer such as Gmail. That applies to all of you.	pctek (84)
1361549	2013-12-03 03:15:00	Mine is an xtra.co.nz email address. Twice, now, I've received email messages purportedly from people I know, that they have not in fact sent. On those emaols other recipients are shown as well - and those are actual email addresses that the senders know and use (incidentally, some are known to me,as well). The messasge subject in both cases is "greetings!". Curiously, each message is just a web address - and it's printed twice in normal and seriffed type face. It is paydayloanhelp.info - but if you load that into a web browser and click on it, it instantly changes to soemthing different (at which point I get to hell out of it), but it doesn't appear to open a web site. Obviously we'd like to stop these bogus messages: everybody worries when people think they've done something they haven't. Can anybody shed any light on this (potentially dangerous??!!) anomally, please. And how do we stop these messages? Mike S The website runs and interesting little bit of javascript. To stop them you just need to change your Xtra password.	Webdevguy (17166)
1361550	2013-12-03 05:29:00	I've also received an email from a person I know (ex-client, and that alone made me suspicious) so I looked at the full header in Mailwasher . What I usually do is first look for a payload, but there was nothing showing . Next step was to run the IP addresses through Whois . In this instance there are five individual addresses and none can be resolved the result is always: # Query terms are ambiguous . The query is assumed to be: # "n 75 . 132 . 229 . 65" Which suggests to me that these IP addresses have been disguised . Other examples from the message are 98 . 138 . 101 . 128 72 . 30 . 236 . 136 and 98 . 138 . 89 . 195 I won't be downloading it, that's for sure . Cheers Billy 8-{)	Billy T (70)
1361551	2013-12-03 09:15:00	You can't stop them unfortunately. Yahoo's mail servers have been hacked again and they'll need to fix the security hole otherwise it will just keep happening. You can change your password but that doesn't mean it won't happen again. I think this is the third time this year something like this has happened. As others have already said best to change to another email provider like gmail or outlook.com.	CYaBro (73)
1361552	2013-12-03 20:23:00	change your email pass here. Do it regardless www.telecom.co.nz go here & check if someone else had logged onto your email a/c api.login.yahoo.com	1101 (13337)
1361553	2013-12-03 20:30:00	Thanks for the replies, folks. Changing to another email address is a bit of a hassle - we probably all feel the same way. So, for the time being I've just changing my password (I assume my Yahoo.com.au address would be a no/no?!!!!).	Mike S (1766)
1361554	2013-12-03 23:26:00	Just get a Gmail or Outlook.com address and save yourself the grief of using a @xtra.co.nz one..	paulw (1826)
1361555	2013-12-03 23:57:00	Thank you all for the replies and suggestions; the consensus seems to be to quit Xtra, so how about Hotmail, folks? I think I might already have a Hotmail account (rather than proliferating all over the place)? Otherwise I'll opt for a Gmail address. Just get a Gmail or Outlook.com address and save yourself the grief of using a @xtra.co.nz one.. Mike S	Mike S (1766)
1361556	2013-12-04 00:42:00	The LAST thing I would do is get a gmail account....they scan all your mail so they can harvest mine data to advertisers!....thats right!......If you need a safe e-mail, use outlook.com..... Also, just because you have mail from a known sender, it doesn't mean that it was sent from them...Lots of people have their home mail client compromised by bots which then send the address details on contacts onward for phish attacks. If you suspect e-mail, open it from a browser and not your email client.	SolMiester (139)
1 2