Important: Re PM spamming here

This has been mentioned in a couple of threads, but it needs to be highlighted.

Do not click on links in spam.

The trigger for this one is a blast of PM spam being sent using several compromised accounts on the forum. It's not certain yet if the spammers got the passwords by force (dictionary attack) or through malware on the machines belonging to those members.

Practice safe hex, folks.

Point 1: Always use strong passwords.

Point 2: Use up-to-date security software on your systems, and never assume that's enough by itself.

Point 3: Never respond to offers in spam.

This particular one will make a nice example. First, the target domain was registered through a Chinese registrar. It's got Russian DNS (and probably Russian hosting). Almost certainly botnets involved in the process.

To sign up for the "free account," you need to give them an email address and phone number. Unless you're surfing using proxies, they'll have the IP address associated with your machine. And all the other info your browser relays in the normal course of surfing. Notably your browser type and OS.

Everything needed to make it easier for them to hack your system, crack or social engineer their way into other accounts, etc, etc.

Just stay the hell away from stuff that's advertised in spam, folks.


Paul