Jump to content
SAU Community

Spam Pms With Links To Spyware/malware

Rolls
 Share

Recommended Posts

turbo_brian Community Regular

turbo_brian

Posted
Posted

They are not actually bots, but people that sign up, post (if needed to activate PMs) and then use a script to PM everyone on the site, person by person.

They have hit MANY sites, a simple google of the username will show this.

The Link SHOULD NOT be clicked, the PM should be deleted immediately, and a moderator/admin notified of the user so that the account can be disabled, and the account's sign-up IP address should be blocked from accessing this site.

OzMazda.com took the step of blocking the IP address range the user signed in from, and has been clean ever since, but prior they had 3 different attacks in the space of a week.

B.

  • Replies 63
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

SLY-25T Mentor

SLY-25T

Posted
Posted

i got it too

Personal Message

brickerza

View Member Profile

Add as Friend

Send Message

Add to PM block list

Forward PM

Find Member's Topics

Find Member's Posts Weekend, Today, 08:36 AM

Rank: RB20E

Group: Members

Posts: 0

Member No.: 61,986

Joined: 21st April, 2009

Do it now!

R31Nismoid Grand Master

R31Nismoid

Posted
Posted
Time to upgrade the anti bot join page.

Its not a bot thats joining up - its actually a human completing the registration process.

Then they proceed to run a script/bot once all of it is complete.

Next time - please post in the one thread that we have dedicated for this.

http://www.skylinesaustralia.com/forums/Pm...or-t265283.html

Thanks

R31Nismoid Grand Master

R31Nismoid

Posted
Posted

^ if your selling goods, ie wrecking a car with 20-30 parts.

You're going to get triple that in PM's... So it's VERY hard to decide on a limit that doesn't impact users

There is a IPB release coming and so on, Admin will have to think about how we set the limit

Phatboy Mentor

Phatboy

Posted
Posted
^ if your selling goods, ie wrecking a car with 20-30 parts.

You're going to get triple that in PM's... So it's VERY hard to decide on a limit that doesn't impact users

There is a IPB release coming and so on, Admin will have to think about how we set the limit

I mean to set a limit on how many PMs you can send, not receive. I think very rarely do people send more than 20 PMs a day. Maybe make the limit 50 then... Even that would make it less spam-worthy than now.

Anyway, hopefully the update will help kill spammers.

Rolls Grand Master

Rolls

Posted
  • Author
Posted (edited)
I mean to set a limit on how many PMs you can send, not receive. I think very rarely do people send more than 20 PMs a day. Maybe make the limit 50 then... Even that would make it less spam-worthy than now.

Anyway, hopefully the update will help kill spammers.

Maybe make the post limit only 10 posts or so, most spammers can't be bothered making 10 legit posts and anyone that is serious about selling parts would surely have been part of the community and have 10 posts anyway, also its not stopping them from sending PMs its just limiting how many they can send in a day.

I guess wait and see if spam like this continues to be a problem, if it stops at only these two events then that kind of action probably isn't necessary.

edit: A better option would be to add captcha phrases (enter in some weird looking text) to people sending PMs with less than 10 posts, like you see on most online signup websites. I don't know how difficult this would be to implement, however Vbulletin? is pretty popular so someone has probably already made a mod like this.

Edited by Rolls
R31Nismoid Grand Master

R31Nismoid

Posted
Posted
I mean to set a limit on how many PMs you can send, not receive. I think very rarely do people send more than 20 PMs a day. Maybe make the limit 50 then... Even that would make it less spam-worthy than now.

Anyway, hopefully the update will help kill spammers.

Like i said, 20-30 parts, that means at LEAST 40-50PM's, and that means generally you would be replying - which means one user sending.

Its not like we haven't already thought about it all :P

PurpleR32 Experienced

PurpleR32

Posted
Posted
Like i said, 20-30 parts, that means at LEAST 40-50PM's, and that means generally you would be replying - which means one user sending.

Its not like we haven't already thought about it all :/

Just go another today (deleted member already)

As i dont use PM's much it might be a dumb question, but is there a timer limit (like posing on the forums) for sending PM's?

IE

You can only send 1 PM per minute or so?

It may at least slow down the amount of PM's they can send

funkymonkey Grand Master

funkymonkey

Posted
Posted

OK so we shouldn't be receiving any more spam PMs. I've put in two methods of blocking this:

If you're just a regular member then you can only send one PM every 5 mins.

SAU VIC, WA, QLD and NSW club members, mods, admins, traders and contributors can send unlimited PM's... the assumption here is that we've verified who you are so we trust you.

Also if your postcount is below 10, then you can no longer PM. This will hopefully weed out people who sign up and then supply the login to bots.

I'll run a few cleanup queries tonight which should remove the spam PM's from your inboxes if they're still there.

If you do get anymore spam PM's (ie after the time I posted this) please let me know, as it means the bots are circumventing the above patches.

Thanks for your patience guys.

  • 2 weeks later...
funkymonkey Grand Master

funkymonkey

Posted
Posted

lol unfortunate side effect. I just can't believe how much trading goes on by people who don't contribute any useful posts on the forum.

At the very least post up a Intro post in the Newbie section and have a conversation with people, it'll get you to 10 posts pretty easily.

R31Nismoid Grand Master

R31Nismoid

Posted
Posted
That's a bit rough! Why don't you just make it 5 so they can't do it in one sitting?

Well whats worse?

People getting infected by a virus because of spyware - or some mild restrictions to stop it?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing


  • Similar Content

  • Latest Posts

    • Zabuza
      Need AC Compressor for R32

      By Zabuza · Posted

      Ok glad you clarified on the frenchy’s options , I was worried about if my oem hoses would fit the new compressor or not if I just bought the bracket/compressor kit ,  didn’t realize they also sold a larger full conversion kit. Hmm may just go oem in that case then to make it easy only because I plan to sell this car to upgrade to a 32 GTR or 34 GTT.
    • sausagepianist
      V36 2008 Coupe Wiring Differences with Android Screen

      By sausagepianist · Posted

      Right, here's a video of the basic operation at least.  This is what you can expect day to day when you turn the car on and it boots from standby.  The only thing from a media point of view I haven't gotten working is for it to autoplay plexamp when it turns on from standby (it works from cold boot) but that's more of a plexamp problem as it will autoplay other music players.  Also attached is my one stray cable.  It's part of the screen's wiring adapters but there's just nowhere for it to go in my car.  I've just now done a bit of research and found a matching port on a 2010-2014 head unit with BOSE.  Mine has no BOSE so that's that case pretty much closed I think.  Plugging in the Infiniti AC panel basically did nothing for me, so that's a dead end as well.  Next port of call is to mess with this CANBUS module and see what I can find from it.  I found this resource containing the DBC files for a 2010+ G37 : https://github.com/icecube45/Dash_InfinitiG37/blob/master/InfinitiG37.dbc I'll now have something to go from when I try to extract my CANBUS data so I can see if the HVAC Mode, Fan Speed, Temperature, etc. match and also the gear shifter position.  It's a pretty big assumption that it's just mismatched CAN signals but considering all the devices in the CAN network are talking to each other (AC can be fully adjusted just with no info on screen) it might be a safe one.  I will report back WhatsApp Video 2025-02-26 at 12.49.10.mp4
    • sausagepianist
      V36 2008 Coupe Wiring Differences with Android Screen

      By sausagepianist · Posted

      Thanks for that Paul.  Do you think if I posted a picture you'd be able to remember where it went? 
    • sausagepianist
      V36 2008 Coupe Wiring Differences with Android Screen

      By sausagepianist · Posted

      Sorry Duncan, I didn't get a notification for the replies.  Thanks for responding!  It's a full Android device, but does allow you to use CarPlay/AA as well.  This is the one I bought from NaviRS on AliExpress: https://www.aliexpress.com/item/1005006368602668.html?spm=a2g0o.order_list.order_list_main.111.59aa1802JDzQ0E - the 2K 8G-256G CAM variant but it seems to have gone up by £170 since I bought it!  My purchase was ￡307.14.   It's not the fastest thing in the world but performs perfectly adequately.  It stays on standby unless I disconnect the battery and let it power down, then it's just a fairly standard Android bootup time from cold.  The DSP Equaliser is very nice and made the standard stereo system sound pretty decent compared to the stock screen.  Perhaps I can take a video of it when I get a sec. It *allegedly* supports the reverse camera, but I'm yet to get that working.  It has options for reverse cam (a camera unit can be bought separately) or 360 cameras (also bought separately).  To be fair it doesn't seem to detect that the shifter was put into reverse but I'm working on a theory about this as well.  At the moment I'm going without which is a bit annoying considering the car is an absolute canal barge but so far I haven't caused any damage I'll grab a picture of the wire I'm missing later today when I can get outside.  My theory, by the by, is that not only is the head unit different, but the CANBUS network has different signals for the different years.  I think this because I have a spare AC panel from a newer Infiniti G37 (as opposed to my Nissan panel) which wouldn't control anything except the volume when I had it wired up with the stock system.  I'm going to throw it back in and see if the screen will respond to it.  I've just ordered an arduino CANBUS module so I can have a look at the signals going around the car and see if I can spot anything.  I'm thinking if I can work out what it's expecting vs what it's getting I might be able to translate and relay the signal back but so far just a theory anyway. I also found this on my travels, so far the only one that specifically matches my car: https://www.aliexpress.com/item/1005002822934280.html?spm=a2g0s.imconversation.0.0.33433e5fgttovi If you look at the picture of the before, it has the card reader slot, and the picture of the head unit is exactly the same as the one pictured in my original post.  I asked if they sell the cables separately but sadly they won't.  I didn't want to just buy this one because it's a super old Android version and only dual core - likely slow as hell. 
    • sonicii
      V35 Overheat + Coolant Boil & Overflow + Engine not Starting

      By sonicii · Posted

      As above, you did refill the coolant and burp the system before running it again didn't you?
×
×
  • Create New...