[Merged] NTL spam

[Chris W]

http://www.cableforum.co.uk/board/sh...77&postcount=1

or this one is quite amusing for an ebay scammer getting scammed

[goldoni]

Originally Posted by poolking

Goldoni,

Do a search on google and you'll find some people play these scamsters at their own game and string them along, they make some interesting reading.

Thanks for that I have now spent 150 minutes reading emails, its nice to see a scammer scamed, nice one and thanks for all the posted links.

[td444]

I dont get any spam on my NTLworld email accounts - and I dont even use them. They must have guessed your email address via brute force + dictionary attacks.

[AdeRickus]

Brute force doesnt make sense, I can see others in the email address list and they are VERY specific, it is a list of some sort,


Dictionary, I have already ruled out, my name isnt on one, guaranteed,

The only people who know my email address is NTL themselves,

[Stuart]

Originally Posted by AdeRickus

Brute force doesnt make sense, I can see others in the email address list and they are VERY specific, it is a list of some sort,


Dictionary, I have already ruled out, my name isnt on one, guaranteed,

The only people who know my email address is NTL themselves,

Actually, spammers use a combination of hacking and brute force. They don't need to necessarily hack NTL. If you have used your NTL addy as a registration email for any websites, they may hack the sites. If you (or any of your friends/colleagues) has your address in their Outlook address book, it is possible that they (accidentally) downloaded a virus that then transmitted the addresses in that address book back to the spammers. It is also possible that these viruses have set up their own SMTP service on the affected PC and sent the emails out to all the addresses in the Address book.

On top of these (and other methods) , they do use Brute Force.

[AdeRickus]

Not posted my NTL email address
Dont give out my NTL email address ( No point, hardly ever works ! )

I Dont use it.

And before enyone asks,

It actually automatically forwards to an email address that I do use,

No virii get onto my PC, not wanting to sound upset, I am a programmer and not that daft

[BlueMeany]

I heard somewhere that comcast in America bought into, or bought out, ntl over here.

If that is the case, I'm not at all surprised that spam is on the increase. Two thirds of the spam I get on my old lineone account is from comcast.net domains.

I hadn't been getting *any* spam on my ntl accounts until the last couple of weeks... but I've noticed it creeping in on my secondary accounts now, and I haven't done anything different.

[Stuart]

Originally Posted by AdeRickus

Not posted my NTL email address
Dont give out my NTL email address ( No point, hardly ever works ! )

I Dont use it.

And before enyone asks,

It actually automatically forwards to an email address that I do use,

No virii get onto my PC, not wanting to sound upset, I am a programmer and not that daft

Didn't think you did sound upset. Actually, I didn't say that your PC has the virus (assuming there is one). What I was saying is that someone who has your address may have a virus. That virus could have accessed their Windows Address book, and then either used it (while fudging the headers to hide where it comes from), or sent it to someone who then used it for spam or sold it to a spammer.

It's also theoretically possible that somebody hacked NTL, but unlikely. I doubt NTL would have sold your details on as a) this would violate the Data Protection Act, and b) would not make them a lot of money.

Originally Posted by threadbare

what lack of spam software is that then?

What demonstrable anti-spam software is in place? I see no evidence that NTL are filtering any spam whatsoever. I've seen it said on this forum before that NTL use Spamhaus, but setting SpamPal to only use Spamhaus correctly identified 99% of the spam that comes through. If NTL do use Spamhaus, then they sure aren`t using it correctly.

Until someone can actually provide evidence that NTL use anti-spam software then I simply can`t believe that they do.

[goldoni]

Its Saturday morning and all is well with the world, Iâ₠¬ÃƒÆ’¢â€žÂ¢m awaiting the arrival of a NTL Engineer regarding my STB, but then I get in my inbox of one of my domain email accounts The emails are formated as in email:


Dear Lloyds TSB customer!
Please read this important message about
security. Your account has been randomly
chosen for verification. This is requested
to us to verify that you are the real owner
of this account. All you need to do is to
click on the link below. You will see a verification
page. Please complete all fields that you will see
and submit the form. You will be redirected to Lloyds
TSB home page after verification. Please note that if
you don't verify your ownership of account in 24 hours we
will block it to protect your money. Thank you.
https://online.lloydstsb.co.uk/applypassword.ibc

Lloyds TSB Bankаplc and Lloyds TSB Scotland plc are
authorised and regulated by the Financial Services Authority


So not wanting my account to be frozen I followed the instructions and entered my details, Name Richard Soul, my account number xxxxxxxxxxx, my sort code xx xx xxand password, ivabigun@27 ONLY JOKING I got up early this morning and have not registered to join the DH club. This was lucky as the next email believe it or not was as follows now the only problem with this email I donââ‚Âà ‚¬ÃƒÂ¢Ã¢â‚¬Å¾Ã‚¢t have a CityBank account so this was a big clue it must be a scam.:


We recently noticed one or more attempts to log in to your Citibank
account from a foreign IP address and we have reasons to believe that
there was attempts to compromise it with brute forcing your PIN number.
No successful login was detected and you have full protection by now.
If you recently accessed your account while travelling, the unusual login
attempts may have been initiated by you.

The login attempt was made from:
IP address: 173.27.187.24
ISP Host: cache-82.proxyserver.cis.com

By now, we used many techniques to verify the accuracy of the
information our users provide us when they register on the Site.
However, because user verification on the Internet is difficult, Citibank
cannot and does not confirm each user's purported identity. Thus, we
have established an offline verification system to help you evaluate with
whom you are dealing with. The system is called CitiSafe and it's
the most secure Citibank wallet so far.

If you are the rightful holder of the account, click the link bellow, fill
the form and then submit as we will verify your identity and register you
to CitiSafe free of charge. This way you are fully protected from fraudulent
activity on all the accounts that you have with us.

Click to protect yourself from fraudulent activity!

I would just love to click the link and give some duff but real looking information so that they think I have fallen for their scam??? But my pooter has Spyblaster loaded, which was real lucky, as it wanted to load 41 scripts to view the web page

To make Citibank.com the most secure site, every user will be
registered to CitiSafe.

[Stephen Robb]

A friend of mine drew my attention to an article in a paper about a fortnight ago covering this very problem! The problem is caused by trojan horses. They get into your computer via pop-ups and other advertisments.

Firewalls and anti-virus programs cannot detect these, and therefore allow them to pass through and either let them sit resident in your Temp Files or load a file folder on your C:\ drive.

Swoop101 is right about them generating random numbers and letters either for the From Name or domain sites. As there is so many combinations neither Message Rules or Block Sender cannot cope. I must have about 1,000 Blocks but they still get through. I am downloading about 200 to 300 emails a day, and it's the same old sh*t day in and day out.

The article also drew one's attention to a program called Ad-ware 6.0. It's a Swedish program and it is at:

www.lavasoft.de

I downloaded the free version and I must admit it was rather inpressive. It digs right down in all your programs till it finds them. To date it has deleted about 50 files and removed about 30 folders. It was so good I got the registered program which cost about £20!

Originally Posted by threadbare

what lack of spam software is that then?

That would be the complete lack of anything useful for blocking spam. I have virgin.net and ntl accounts [both running on ntl equipment]. Both used to get about equal amounts of spam (50 to 75 per day).

About two months ago, virgin implemented their anti-spam measures and now I hardly get one per day on that account. The ntl account still gets 70+ per day. Too compare with other services - I have a hotmail account - that no longer gets spam. I have an Orange account - that gets 40+ a day (yep, they have no clue about spam either).

If, as you have claimed in the past, ntl use anti-spam software then they clearly have it very badly configured. To all intents & purposes it is totally transparent - spam just passes right through it.

[Nemesis]

Originally Posted by Pem

That would be the complete lack of anything useful for blocking spam. I have virgin.net and ntl accounts [both running on ntl equipment]. Both used to get about equal amounts of spam (50 to 75 per day).

About two months ago, virgin implemented their anti-spam measures and now I hardly get one per day on that account. The ntl account still gets 70+ per day. Too compare with other services - I have a hotmail account - that no longer gets spam. I have an Orange account - that gets 40+ a day (yep, they have no clue about spam either).

If, as you have claimed in the past, ntl use anti-spam software then they clearly have it very badly configured. To all intents & purposes it is totally transparent - spam just passes right through it.

And I would agree with every word .... I get more spam through NTL than any other email account I have.

[tomcooper]

i recently setup an NTL email address for my mum

the next week when i showed her how to use it in came about 20 spams!

and i just went to check my NTL email account and i got 823 spams in one week

something needs to be done as its getting worse and worse

[AdeRickus]

Do you give your email address out ??

I wouldnt be surprised if you say no !

Whats going on at NTL, I dont know ANY other ISP thats this bad, not even Hotmail !!!

Are the email address lists walking out of NTL ???

I Wonder !