• Hi all and welcome to TheWoodHaven2 brought into the 21st Century, kicking and screaming! We all have Alasdair to thank for the vast bulk of the heavy lifting to get us here, no more so than me because he's taken away a huge burden of responsibility from my shoulders and brought us to this new shiny home, with all your previous content (hopefully) still intact! Please peruse and feed back. There is still plenty to do, like changing the colour scheme, adding the banner graphic, tweaking the odd setting here and there so I have added a new thread in the 'Technical Issues, Bugs and Feature Requests' forum for you to add any issues you find, any missing settings or just anything you'd like to see added/removed from the feature set that Xenforo offers. We will get to everything over the coming weeks so please be patient, but add anything at all to the thread I mention above and we promise to get to them over the next few days/weeks/months. In the meantime, please enjoy!

Hacking

Rod

Old Oak
Joined
Jul 21, 2014
Messages
4,471
Reaction score
0
Location
Winchester, Hampshire
I got a message from Bob pointing out that my email address book had been hacked as "I was sending out" Spam
I've changed my gmail passwords twice, just as an extra precaution and joined their double authentication process where it messages you if passwords etc are changed.
It also asked me to join "Google Now" which I did as it gives you calendar reminders and notifications, traffic conditions etc - worryingly it says I'm going to Paphos as well as the things I'm really doing!! So somehow or another its joined me up with somebody else?
I've sent in Feedback and deleted the App - worrying!?
The Pathos hotel link includes a Kuoni email - I'm booking in on the 22nd?? [emoji848]

Rod

Ps can a Mod change the title please?
"Hacking"
MOD : Done.
 
I don't understand - how did they get Bob's address with a message from me?

It enclosed a Phising spam from Africa.

Another friend of mine got one too.

I googled Hacking etc and it didn't really give an answer that explained how - other than it could be a proper hack into your system or they found your name and used it - but how did they get the others?
I've run a Malware & Spybot check but didn't find anything amiss?
The other weird thing is they put a dot between my initial and name but my account like that does not contain Bob's - it's another account with no dot separation?

Rod
 
The From: field in an email is editable and bears no relationship to where it actually comes from.

You need to look at 'All headers' or somesuch name in the PC world. That will give where the email came from but even then that can also be altered. Mark's your man for this, I think.
 
I get loads of gmail for other people with the same name as me!

Gmail does not recognise the . in email addresses. I got in early and have my name at gmail with no additional letters numbers etc. I get emails to robertpxxxx@ (not actually xxxx of course) but google allows people to register robert.pxxxx@ even though they ignore the . .
So mail to that address comes to me too. As a test I sent an email to r.o.b.e.r.t.p.x.x.x.x@ and I got that too.

Some of the stuff I get is money related too! I just delete them. I can't contact my namesakes because the emails would come to me!

using report spam and 'block sender' has cut out most of them but still annoying.
 
I wouldn't worry about it Rod, emails can, as Robert says, be sent in your name without going anywhere near your account simply by bouncing a fake email sent from address of an SMTP server. They probably have your contacts from emails sent previously and just spamming the same.

in 99.9999% of times your account hasn't been compromised they're just using your name. I must get 5-10 emails a week from myself :)

Take off the tin hat and have a cocoa :P

Cheers
Mark
 
Thanks folks - I haven't got a tin hat ( only a plastic one ) but I'll have some cocoa [emoji3]

Not to worry about the Calendar business too?
Not had anything back from Google.

I got in early with gmail and so did my wife too - both got our names with nothing added.

Rod
 
Not sure on the calendar bit tbh, but could very well be a clever advert that's somehow aded something in…?!?

Are there any other oddities you can see or is it just that one? Also, if it had somehow joined accounts then the other persons details would be in that calendar event somewhere I would think.

Thanks
Mark
 
It seems to be the only one or two? - booked into 2 hotels in Paphos on the 22nd (I wish!). When opening the Full Itinerary there's an email box which when opened is one from Kuoni advertising holidays
Weird?

Rod
 
Rod, if you go to 'Share this calendar', any clues there? Or if you click on that Kuoni holiday, is there a way to see who it belongs to ? Just wondering if one of your friends has inadvertently turned on Share this calendar and you're named as a sharer ie you can see their calender.
 
To add to the mystery, the email that purported to come from Rod to me was from r.bould@mma.com.mx a fictitious address but sent to Motors@minchin.org.uk which is a receive only address posted in three woodworking forums and in my motor paper. However the latter only has my initials in it (RC). The email signs off as "Rodney" which does not appear in Rod's WW postings

So I conclude that either one of Rod's address books has been copied form somewhere (to get the correspondence between Bob and my motors address), or it has been hoovered from a WW forum but how did they get to use Rodney?

Bob
 
I'm now staying in Mauritius, Bali, Tenerife and 3 other hotels - all linked to Kuoni adverts sent to my Gmail account.
I unsubscribed from their emails but that doesn't seem to stop them?
At least I'm not getting any other persons calendar details sent with mine.

Rod
 
Rod":8uaft86y said:
I'm now staying in Mauritius, Bali, Tenerife and 3 other hotels - all linked to Kuoni adverts sent to my Gmail account.
.....
Rod

Can I have your Airmiles, please, Rod ? :D
 
I wish! [emoji3]

Just had a phone call from my CC Bank - my card is at risk of fraudulent activity so has been stopped and a new one will be sent.
I've checked my account online and no sign of anything dodgy so far?
Nice that the Card Company's are on the job.
And before anyone asks - I rang them back on a number I know is safe and I used my pin reader as part of the verification process.

How do those pin readers work - I also used to use one when I worked, to log into the Company's server when out of the office?

Rod
 
Rod":2na7zxzo said:
How do those pin readers work - I also used to use one when I worked, to log into the Company's server when out of the office?

Rod

They contain a chip which has a 'seed' hashing algorithm on it and the other end server knows what number your 'seed' started on and using the algorithm what number it will be on at any given login time.

All very clever stuff. I manage our setup in work.

Cheers
Mark
 
Back
Top