***Caution***: Paypal Users - Page 5

Gareth · 07-02-2005, 17:40

All signs do point towards this forum having unintentionally been the source for them obtaining our mail addresses. Although, I'm sure everyone would agree that this happened unlawfully and that no admin would have willingly made these details available.

**Maggy** · 07-02-2005, 17:42

I've got two of them,one to my Gmail addy which I have never used with my Paypal account because there was NO Gmail when I set up the Paypal account.Gmail picked it out a a suspect phishing exercise and invite me to report it which I did.Excellent service at Gmail.

Yesterday I got one with details of my expired card at Paypal to my old NTL addy which I sent to spoof@paypal.com to be told it was real .Last week I sent another to spoof@paypal which was fake.It is going to affect peoples confidence in certain sites and services I'm afraid.

Cloudmarks Safety bar treated this one as Spam so I guess they have sent out too many of them and the Cloudmark community have considered them spam too.

Frankly I'm more than glad to abandon Paypal after reading some of the online info about them.I never used it more than twice anyway.Same goes for Ebay.

I no longer trust them either.

**Damien** · 07-02-2005, 17:55

How could they have gotten into the database? Also if they did what are the chances of them getting my password for this site?

Russ · 07-02-2005, 17:56

Pretty much impossible I'd say - not even WE have access to your password.

Mr_love_monkey · 07-02-2005, 18:02

passwords usually tend to be stored encrypted, with a one way algorithm, so that when you put your password in, it is encrypted and then checked with the stored one - it's difficult to work your way backwards

**Damien** · 07-02-2005, 18:06

Quote:

Originally Posted by Russ D

Pretty much impossible I'd say - not even WE have access to your password.

ok, cool. I changed my password on all important sites anyway, had it for over a year

Graham F · 07-02-2005, 18:36

Quote:

Originally Posted by Russ D

Pretty much impossible I'd say - not even WE have access to your password.

well i don't have a paypal account and i got one of these emails to my address that is on here

**Damien** · 07-02-2005, 18:38

Quote:

Originally Posted by Graham F

well i don't have a paypal account and i got one of these emails to my address that is on here

HE was taking about passwords, not email. It seems someone has gotten the forums email list.

nffc · 07-02-2005, 18:46

I haven't had it in any of the umpteen addies I have BTW.

Quote:

Originally Posted by Richard M

I got this email, how the hell did they get an email address that I've never given to anyone?

I'm sure, unless it's got hold of a forum list or something [which reading the thread could be possible] they just generate random addies and hit gold sometimes...

Although, if it had got the forum list, I would have got one...?

BTW, I don't use Paypal, it's too dodgy- too many scams IMO.

Russ · 07-02-2005, 18:49

Very curious, it came to my cableforum address, one like Richard I have never given out.

07-02-2005, 18:50

If it helps. or means anything, I've NOT had one, at least not yet, but I seem to recall reading something about a MySQL exploit which might be relevant - I'll have a sniff round.

Richard M · 07-02-2005, 18:52

Quote:

Originally Posted by nffc

I haven't had it in any of the umpteen addies I have BTW.

I'm sure, unless it's got hold of a forum list or something [which reading the thread could be possible] they just generate random addies and hit gold sometimes...

I doubt it, this time it feels different.
__________________

Quote:

Originally Posted by JohnHorb

If it helps. or means anything, I've NOT had one, at least not yet, but I seem to recall reading something about a MySQL exploit which might be relevant - I'll have a sniff round.

No need, that affected Windows only and we have the MySQL socket closed at the firewall.

07-02-2005, 19:00

http://www.theregister.co.uk/2005/01/28/mysql_worm/

I think it was this one - but it only affects Windows - is CF hosted on Windows?

[Edit] beat me to it!
__________________

If not already thought of, a warning e-mail to all registered users might be an idea?

colinbar · 07-02-2005, 19:02

Hi,

I have also received this mail and i do not have a PayPal account!

purenuman · 07-02-2005, 19:02

Quote:

Originally Posted by Nanook

I've been sent the e-mail to the address that I used to register on this forum, & I have no paypal account.

I have also been sent the e-mail to the address that I used to register on this forum, & It has no paypal account connected with it.