Crazy emails - hacker?
-
-
- Rudy Leffler
- Sr. Rocketeer
- Posts: 106
- Thanks: 0
-
A site I put together for a dulcimer association was hacked a while ago. I have updated joomla on the site and haven't had any more problems, but 2 times now the owner got weird emails that seem to have come through the site. Could you look below and tell me what is going on...what they are doing or trying to do?
She got 10 of these today.
> To: This email address is being protected from spambots. You need JavaScript enabled to view it.
> Subject: South Mississippi Dulcimer Association: Kay Cox
> Date: Mon, 23 Mar 2009 14:34:58 -0700
> From: This email address is being protected from spambots. You need JavaScript enabled to view it.
>
> This is an enquiry e-mail via www.mississippidulcimer.com/ from:
> Lemuel Burnett <This email address is being protected from spambots. You need JavaScript enabled to view it.>
>
> egfdkj5bcb062odb
> tfkum xxnep
> gdvbeiktzooi.com
> xjnucul xpzocciz
> iygmcoip.com
> ycvwqp qbnqbaei
> awenxd.com
> qbcqtgs nxrrys
> dstwvyl.com
> rjqnthq codgg
> kmfuyigbz.com
> wlxea xnrkzt
> pxeawkihbo.com
> eqhhbre pxhimqt
> lowasysq.com
> mpnyhrn wdqdy
> solmuylglyo.com
> exgwzdp obodieml
> diaclagv.com
> ksddzcc amnjejx
> jzqdho.com
> aohmgqa nivbbpf
> fjumsfmnvd.com
> uvlrw mwywip
> kwnjmadpbvkd.com
> mpgdocx ikdub
> aggekwud.com
> zmjevm vvgp
> yjijutbrck.com
> pbladhg vondzty
> veirjxag.com
> oinrscj wpii
> ugpcyxcqjp.com
> ilngmp snrxjtbm
> owftitk.com
> atifzoa fsif
> zywdndxi.com
> sixat ewdmrltt
> lhschjdxt.com
> xtvlag ipna
> oqemzpihotk.com
> gyqhgnh vtvcr
> cjfwwquwwiv.com
> ohqyc dnimvs
> vhdmkr.com
> kyqgya rxnclrc
> yvrahljc.com
> zvxcgdh kzigsy
> lpklqzmr.com
> fzxiyu tjudvmrw
> jfyraep.com
> ftuqm zpudwpi
> xznnghmj.com
> ufebtk rfzl
> qzobgeensqhv.com
> mpkesnp krubj
> ijvtsclwujx.com
> mauqy khxeuel
> vjibba.com
> dlejakg shob
> tdhthju.com
> ichazio umwj
> ulmskpnzjaqi.com
> ssucpsr rfyssg
> ukncmt.com
> qqhkjm xqdfqihv
> sltbzv.com
> zpdbvop bmzmpfmv
> azpgnbp.com
> ftejxdh fradmjz
> nliedxgce.com
> eqjzcby zxouqh
> zhfqmyutnc.com
> lwghwk eckud
> qvfdeftwn.com
> oxdzqbw azlqabcz
> qzccysyngwyw.com
> vabto kpduiom
> ncenqast.com
> ozycsa ftworvzx
> xmbnwc.com
> aadcnj fgyy
> bphsflu.com
> hvbpe fpcxe
> siljeclcq.com
> iquamr bdds
> agjsjt.com
> myhzjo rvcybo
> mdkbvnim.com
> rncmqq ppvmqmep
> suzlylfukrk.com
> wrylyf vfmshk
> lkvicxyyprhx.com
> wgvxzw qnhtqs
> cftprcvdoygv.com
> opbtv lyseesni
> ietmkfnlmb.com
> bhdspi mlvgn
> ejbfgsmgnaw.com
> ctffylu lsqn
> ymewwqh.com
> oaoom wmlzuru
> xjcbdmvmuhr.com
> tebgs jzfwme
> wxpvzqdw.com
> qeutn sotgll
> djlcpnfugy.com
> vdsfr gnbp
> homemmaon.com
> nvsjpk yask
> svisuzvuqwg.com
> upwwa trwppz
> pezhfcpyjxm.com
> wufsq kiaudhat
> rditnmsmuz.com
> xpzfih elucqlsl
> xrbikcmpbg.com
> lswerqk abvtj
> kyfqwqysebo.com
> cptxx vmtiols
> avwydwpgo.com
>
-
-
-
- Amandeep Singh
- Preeminent Rocketeer
- Posts: 17652
- Thanks: 2
- Did he subscibe to some mailers
- Quick tips::
1) Clear your browser cache if changes dont reflect
2) Provide link to your site to help us help you better
3) Use in firebug
Tutorial-- http://www.rockettheme.com/blog/team/255-tools-firebug
softlogique.com
-
-
-
- Rudy Leffler
- Sr. Rocketeer
- Posts: 106
- Thanks: 0
- No, there isn't anyone subscribed with that name. I suspect it's a fake name like all the bogus web addresses in the email. This is the second time she got an email like this, but I haven't seen any problems with the site do far. I looked through all the subscribed users and didn't see anything unusual.
-
-
-
- Amandeep Singh
- Preeminent Rocketeer
- Posts: 17652
- Thanks: 2
-
You can check out this:
www.spamlaws.com/spam-blocker.html - Quick tips::
1) Clear your browser cache if changes dont reflect
2) Provide link to your site to help us help you better
3) Use in firebug
Tutorial-- http://www.rockettheme.com/blog/team/255-tools-firebug
softlogique.com
-
-
-
- Rudy Leffler
- Sr. Rocketeer
- Posts: 106
- Thanks: 0
- The thing is that it says it was sent "via" the website. Is someone actually able to send an email through the website when i don't see where they are registered? What purpose are all the bogus addresses serving?
-
-
-
- The Wingman
- Elite Rocketeer
- Posts: 1208
- Thanks: 0
-
K, little confused as to what you mean by went through the website.
1) Spammers spoof your domain name as the domain email sent. So, This email address is being protected from spambots. You need JavaScript enabled to view it. this only last a while...then they move on to some other domain, but it does not actually go through your domain or server. It is just a spoof email label.
2) if they are actually using your website to spam - like using the "invite a friend" over and over or maybe some other function - then you should add captcha or block the IP that is doing it.
What is scarier than spam? Is the people that would see stuff like that and open it, respond to it ect...
People forget - Spam only works because people respond to it.
Don't know if I helped...
Good Luck,
Wingman - "You can learn a lot from a dummy. So, pay attention to yourself." Quote by me.
-
-
-
- Kat05
- Preeminent Rocketeer
- Posts: 25898
- Thanks: 334
-
oh my, just had a similar thread by maria today
www.rockettheme.com/forum/index.php?f=92&t=58221&rb_v=viewtopic - Kat05 / QA Lead & Support / Germany
-
-
-
- Rudy Leffler
- Sr. Rocketeer
- Posts: 106
- Thanks: 0
-
It appears to come through he website because it has this at the top:
> This is an enquiry e-mail via www.mississippidulcimer.com/ from:
> Rosanne Gallagher <This email address is being protected from spambots. You need JavaScript enabled to view it.>
It says it was sent "via" the website.
-
-
-
- The Wingman
- Elite Rocketeer
- Posts: 1208
- Thanks: 0
-
Sounds like they are using your tell a friend or something like that...so, again I am not an expert...but have personal experience with some stupid people spamming...but as to actually hacking your email...don't know, looks more like hijacking.
Which again, spammers tend to use a site for few days, then move on. If I recall I went through my hosting company and asked them what happen, as they can look at the server and see what is going on, compared to Rocket Theme members who can guess what is going on.
So, remember, you are paying them for service (your hosting company) so, now would be a good time to use some of that service and ask them.
Good Luck - "You can learn a lot from a dummy. So, pay attention to yourself." Quote by me.
-
-
-
- Rudy Leffler
- Sr. Rocketeer
- Posts: 106
- Thanks: 0
- I could understand spam. I just can't understand the bogus names and email addresses and the long list of bogus website addresses. I can't figure out what they could accomplish sending that to the owner of the site.
-
Time to create page: 0.066 seconds