Analyzed the header with whatismyipaddress.com
Great tool by the way.
I don't think this site is compromised. Some people make their emails public and this makes them easy preys for phishing attacks.
Topic: Phishing attack on btctalk users (Read 1451 times)
I analyzed the header of the email and this appears to be the source of the spam attack:
How did you get that ip ? I got this from the header; 205.186.168.158
I received an email several weeks ago from a scammer I'd been corresponding with that he'd hacked the forum's data and retrieved all the email addresses from every user. I reported it to a certain someone who clearly didn't do a damn thing about it. This site is apparently as leaky as the US Government. Better to withhold confidential information throughout. May or may not be related to this post.
I analyzed the header of the email and this appears to be the source of the spam attack:
https://cdn.anonfiles.com/1416590866573.png
https://cdn.anonfiles.com/1416590866573.png
Just wanted to report that some scumbag is attacking btctalk users that have a public email sending this email.
The link redirects to www.petcaretv.com
--------------------------------------------------------------------------------------------------------------------
Dear Users,
This mail was sent because you need install New Update for your browsers (Mozilla Firefox ,Internet Explorer,Chrome,...) for News updates on [Suspicious link removed] set Java Software for your Browsers click the following link:
https://bitcointalk.org
Regards,
The Bitcoin Forum Team.
----------------------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs
If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder
This is an automated email - Please do not replay.
The link redirects to www.petcaretv.com
--------------------------------------------------------------------------------------------------------------------
Dear Users,
This mail was sent because you need install New Update for your browsers (Mozilla Firefox ,Internet Explorer,Chrome,...) for News updates on [Suspicious link removed] set Java Software for your Browsers click the following link:
https://bitcointalk.org
Regards,
The Bitcoin Forum Team.
----------------------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs
If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder
This is an automated email - Please do not replay.
Jump to: