I had one of those blackmail emails today from someone who knew my AmigaWorld password. (I don't use it on any other site). Thought I should inform you in case others have received similar. I have changed my password. Message to the hacker ; "go play in the road"

_________________
1200 desktop Blizzard 1260 with 2Gb Jaz SCSI drive, 32Mb, OS3.9 BB2
1200 desktop Blizzard 1230, 32Mb, OS3.2
Trusty 1.3 A500 underneath the TV with SCART

@golem

The same happened to me.

@golem

Yes I had one a few week back, I sent a PM to _Steve_ to see if there had been any compromises but he had not noticed any since the one a few years back and they changed the security measures. Looks as though someone may have got in unknowingly.

I've had several of these ransom attempts over the years, always with an old password from many years ago.

I think that any recent attempts have come from people who have only now picked up the stolen list of passwords from years ago.

Anyone who still uses a years-old password deserves to be threatened IMO.

_________________
cheers
tony

Hyperion Support Forum: http://forum.hyperion-entertainment.biz/index.php

@tonyw

My password was old. I don't think I changed it since joining until now.

_________________
1200 desktop Blizzard 1260 with 2Gb Jaz SCSI drive, 32Mb, OS3.9 BB2
1200 desktop Blizzard 1230, 32Mb, OS3.2
Trusty 1.3 A500 underneath the TV with SCART

@golem

Same.. haven't been here in forever. Came to change password and check to see if I used that elsewhere.

@tonyw

Nope, my password was changed since that last fiasco. It was a new one.

@golem

Password now changed.

Cheers for the heads up.



Spud

_________________
Founder of NWAG - North West Amiga Group

Night Operations

A1200 020/28MHz + 64Mb / 4Gb CF / OS 3.1.4.1 / 1438S
A500+ / 2Mb
A600

@spudmiga

Hi spudmiga,

Any chance you are related to the YouTube content creator "Wooden Potatoes"?

You are both located in the UK.

Last edited by amigadave on 03-Oct-2020 at 11:06 PM.
Last edited by amigadave on 03-Oct-2020 at 11:05 PM.

_________________
Amiga! The computer that inspired so many, to accomplish so much, but has ended up in the hands of . . . . . . . . . .

@Arnie

Quote:

Arnie wrote: @tonyw Nope, my password was changed since that last fiasco. It was a new one.

So can we have official confirmation that there has been another breach or do the moderators simply not know?

_________________
"Art challenges technology. Technology inspires the art."
John Lasseter, Co-Founder of Pixar Animation Studios

@golem

Got one of these messages from last time this happened. Just in case have changed my password again.

Thanks for the heads up.

_________________
Live Long and keep Amigaing!

A1200, Power Tower, TF1260 128MB RAM, 68060 Rev 6, OS3.9 BB2, HD-Floppy, Mediator TX+ PCI, Voodoo 3 3000, Soundblaster 4.1, TV Card, Spider USB, 100MBit Ethernet, 16GB CF HD, 52xCDRom.

Seems like hacked data is still in use.
Recently I get a lot of "returned to sender" mails from "me spamming others"... 🙄

_________________
********** AMIGA - More Than Just Standard **********

@padrino

But I won’t be surprised if someone got hacked with one old vbs script that run from windows scheduler spamming anyone in contact list of outlooks. I believe Microsoft tried to disable vbs at one time, but it was reintroduced as too many used it.

If AmigaOS was more popular, hackers be using AREXX the same way.

Last edited by NutsAboutAmiga on 03-Sep-2024 at 07:21 PM.

_________________
http://lifeofliveforit.blogspot.no/
Facebook::LiveForIt Software for AmigaOS

@golem

I have not seen any spam about Amigaworld, but I have changed my e-mail a few times, so perhaps this hack was from many years back.

_________________
http://lifeofliveforit.blogspot.no/
Facebook::LiveForIt Software for AmigaOS

@golem

You have narcissists on here and they are very sick poeople. They are here to disturb, cause flamewars, hack accounts, bully etc and they do it for even sicker people like sociopaths and psychopaths and nooooo it's not crazy talk, it's real.

They also brainwash and control people with their BS.

You cut them off and all this ends. Simple as that. You don't have to be a Nazi Officer to everyone but in regard of them you need to be like "not here, delete".

And then everything will be fine on every level, no worries.

@NutsAboutAmiga


Well, I use difenr address for private communication.
So, it's unlikely an address book scam... seen those in the past though. =)

I just find it amazing how it is silent for long periods and then restarts, almost like fashion. :)

_________________
********** AMIGA - More Than Just Standard **********

@golem

I find it amazing that mail is so insecure to begin with.

you don’t need a proper sender address, you don’t need TO address, and you can send TO people incognito using BCC.

Most mail today would end up in spam, if it’s not encrypted.

Of course the mail header, has information on what servers where used to send e-mail, but that information is hidden in mail client, unless you know where to look.

URL’s are also tricky, when twitter and google has made it hard to see what URL points to, because of their shortened URL’s. it really is lot of work / doing DNS lookups. It is possible to decode address however.

The real URL does expose the spammer, but it’s a bit of work, to out find out who is hosting the server, how the DNS is registered to, and so on.

Some Domain name provides, allows anonymous, ownership records.
but if you find out who the DNS provider is, you can make complaint, to the Name service provider.

If you Ping the domain name, you find the IP, if you find IP, you can look for owner of IP range, that normally be GoDaddy or Google or someone like that, you can report spam to the hosting provider, if they are not so clever it might point to there ISP. In that case you can complain to ISP. And if point to real company, you can complain to web admin, it can be virus/bot net.

Scams can also be reported to police, Interpol. Google to see the proper way to do it.

Lately I seen lot of mail groups used, to hide, if they are hiding e-mail to many receivers, they might be scared, you inform people on list, that it’s a scam, you send e-mail to same mail group, to inform everyone it’s a scam, you e-mail might end up in spam, so not so easy, and not sure its appreciated.

The tools I like to use, is:

* who.is
* tracert
* geoip
* dnslookup
* google.
* URL decoder.

Good luck cleaning up your spam folder.

Last edited by NutsAboutAmiga on 04-Sep-2024 at 10:01 PM.
Last edited by NutsAboutAmiga on 04-Sep-2024 at 09:59 PM.

_________________
http://lifeofliveforit.blogspot.no/
Facebook::LiveForIt Software for AmigaOS

@NutsAboutAmiga

There's DMARC policy which checks the domain in the message's From: field (also called "RFC5322.From" is "aligned" with other authenticated domain names.

_________________
Amiga 1200 (rev 1D1, KS 3.2, PiStorm32/RPi CM4/Emu68)
Amiga 500 (rev 6A, ECS, KS 3.2, PiStorm/RPi 4B/Emu68)
Ryzen 9 7950X, DDR5-6000 64 GB RAM, GeForce RTX 4080 16 GB

Well, today I got a spam/threatening email that literally contained my old password used here, so now I actually know, with the breach back in the day, not only email but also pwd was stolen.

Just hope AW is more secure nowadays. :D

_________________
********** AMIGA - More Than Just Standard **********