DMusic.com | for indie musicians and fans | Free MP3 music downloads - Forums: Help: Nigerian Scammers are Using Dmusic to spam

Forums > Help

Nigerian Scammers are Using Dmusic to spam

johnnygnote	Date: July 17, 2007 @ 1:51 PM I just recieved this through my Dmusic comments alert: What can we do before it get's worse, because once they start these guys don't stop! *************************** A user has contacted you though your artist page at DMusic.com. Comments - roseline_williamx@yahoo.com Roseline Williams Abidjan capital of Ivory Coast, West Africa. Dear one, I am Roseline williams.the daughter of late Mr and Mrs Covo papie williams. My father was a very wealthy cocoa merchant in Abidjan, the economic capital of Ivory Coast, my father was poisoned to death by his business associates on one of their outings on a business trip. My mother died when I was a baby and since then my father took me so special. Before the death of my father on FEBUARY 2005 in a private hospital here in Abidjan he secretly called me on his bed side and told me that he has a huge amount of fund ($ 5.5 Million dollar) which deposited in a fixed deposit in one of the prime bank here in Abidjan, that he used my name as his only daughter for the next of kin in depositing of the fund. He further explained to me that it was because of this wealth that he was poisoned by his business associates. I will want you to assist me in useing it for investment purpose such as real estate management,hotel management , shares etc. I am honourably seeking your assistance in the following ways. (1) To provide a bank account into which this money would be transferred to. (2) To serve as a guardian of this fund since I am only 17 years. (3) To make arrangement for me to come over to your country to further my education and to secure a resident permit in your country. Moreover , I am willing to offer you a good percentage from the total sum as compensation for your effort/input after the successful transfer of this fund into your nominated account overseas . please contact me on roseline_williamx@yahoo.com Anticipating to hear your response. God bless you as you help me. Roseline Williams Contact info - roseline_williamx@yahoo.com ---------------------- This email was generated by DMusic. Please reply to the individual mentioned in the email, and not to the sender of this email. *************************************
johnnygnote	Date: July 17, 2007 @ 1:53 PM Oh yeah and if I mark this as spam then I won't get legitimate alerts. This really sucks!
officernarc	Date: July 17, 2007 @ 2:36 PM i think you should take the money. just think what you could do for your career!
johnnygnote	Date: July 17, 2007 @ 6:06 PM This is serious, these people are relentless once they start spaming they don't quit. They use a different email address each time and move around on ip's like fly's. Their scams have ripped tens of Thousnads of dollars off from unsuspecting people who don't know any better. I've sent the FBI their IP's and I've been told there's nothing anyone can do. You'd think that with all the Nazi/Gestapo like policing that Homeland security is doing they'd be more diligent about stopping these people but they'd rather harass innocent mother's on airplanes and take away our rights than stop these scumbags. Any way Support, I hope there's something we can do to protect the DM patrons because these guys suck!!
Distilled1	Date: July 17, 2007 @ 7:41 PM playt them its fun I love baiting
ShadowMom	Date: July 17, 2007 @ 7:45 PM There was no user name attached to this email?
hantu	Date: July 17, 2007 @ 7:57 PM You can email artists without being a member of DM, that should be fixed, or at least we should have the option to only have that function enabled for members of DM. But then they could sign up, that's another problem. This still needs to be fixed though, i don't want any old tit emailing me.
ShadowMom	Date: July 17, 2007 @ 8:10 PM That is correct. We have had a case where someone registered and did the same thing. That we can stop. But at the moment, we cannot stop anonymous visitors from using the system.
johnnygnote	Date: July 18, 2007 @ 1:01 AM Here's the header, I don;t know if this will help, let me know. Thanks Shadowmom truevoiceman@yahoo.com via 206.190.48.126; Tue, 17 Jul 2007 08:22:08 -0700 X-Originating-IP: [66.45.25.172] Return-Path: Authentication-Results: mta295.mail.mud.yahoo.com from=dmusic.com; domainkeys=neutral (no sig) Received: from 66.45.25.172 (EHLO mail.dmusic.com) (66.45.25.172) by mta295.mail.mud.yahoo.com with SMTP; Tue, 17 Jul 2007 08:22:08 -0700 Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.dmusic.com (Postfix) with ESMTP id E32CE85C2F6 for ; Tue, 17 Jul 2007 11:22:07 -0400 (EDT) Received: from mail.dmusic.com ([127.0.0.1]) by localhost (hermes [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13492-10 for ; Tue, 17 Jul 2007 11:22:07 -0400 (EDT) Received: from artist.dmusic.com (unknown [66.45.25.164]) by mail.dmusic.com (Postfix) with ESMTP id C95F485C2D9 for ; Tue, 17 Jul 2007 11:22:07 -0400 (EDT) Date: Tue, 17 Jul 2007 11:22:07 -0400 To: truevoiceman@yahoo.com From: "DMusic Comments" Add to Address Book Add Mobile Alert Reply-to: DMusic Comments Subject: Comments from your artist page... Message-ID: X-Priority: 3 X-Mailer: PHPMailer [version 1.72] MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="iso-8859-1" X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at localhost Content-Length: 2008
PrincessTast...	Date: July 18, 2007 @ 8:21 AM http://www.dmusic.com/forum/thoughts/27029#9 Like I said...
PrincessTast...	Date: July 18, 2007 @ 8:23 AM http://www.dmusic.com/forum/thoughts/27029
GreatGooglyM...	Date: July 18, 2007 @ 9:23 AM There's something for coders to work on. Those guys are actually quite hard to stop. On an other music site, I've been getting viagra ads and other spam by spam bots in my guest book. Btw, I wouldn't suggest answering that message, unless you want to get more spam in the future.
Rodrica	Date: July 19, 2007 @ 5:12 AM Oh come on DMusic!! When I signed up to this place..and subscribed...I did NOT say that I wanted anyone to know ANY of my details or to be able to get hold of them - and that includes my email!! Those things should be secure, private things. If I wanted to broadcast all of that I'd give details in my profile! Can you blame me for not recently signing up to the Music Pill? You asked for so much information about me that I was sure it would end up being misused. I asked for less information to be included in the mandatory fields - but to no avail. So I haven't signed up or bought anything - why should I take the risk? At this rate my subscription later in the year is under question too. Give private information to this site? At the moment you have to be joking! I've been getting LOADS of spam - and I'm pretty sure where it originates from because this is one of the few places that has that particular email. Recently there has been a lot of phishing too and they are using bona fide company names to do it. Do NOT hit the links! Often they pretend to be e-card companies. I've taken advice on this and I've been told to forward ALL SUSPICIOUS EMAILS to: phishing-report@us-cert.gov They are supposed to investigate and trace these things. Hope that helps. DM is not the only target for these people - but we MUST try and put a stop to it to secure our future membership or we'll just end up a spammer's paradise.
zedsalt	Date: July 19, 2007 @ 10:32 AM Thank you very much for the address! I've sent things to the Secret Service's Electronic Crimes Division and the FBI's Internet Fraud Complaint Department, but not having fallen for the schemes myself, I've no idea just how malicious any of the people I've turned in are, or if my reporting them really achieved anything. It feels good to have a place to go with emails that I KNOW are phishing...and may well be up to something REALLY bad...or selling my info to other people who are. Now, I wonder if I still have those "You have receive ECard from friend" emails in "Deleted Items"...
LiQuidMetamo...	Date: July 20, 2007 @ 12:26 AM This kind of stuff is on the rise at the moment and no amount of protection stops everything, this is organized crime syndicates and returning mails to them only indicates that your address is valid and leaves you more prone to more. It was estimated that between 20-25% of UK computers are 'zombie' bots that can be remote controlled by hackers who are safe from prosecution in Russia and China, they have already infiltrated you and use your computer as a server, sometimes to take part in denial of service attacks. Hackers rent out their network to mafiosi who use your computer to overload company websites and then they extort money out of them for DoS (denial of service attacks) and there is little the US government agencies can do when most of it is emanating from Eastern Europe and China. Delete any ecards, viagra, free emoticons or whatever other junk arrives. Get Thunderbird for email or at least if you use outlook turn off the preview pane so malicious code hidden in graphics files doesn't run without you knowing. Get a good anti virus, anti spyware and firewall. This only helps make it a touch more difficult for hackers to infiltrate but like a car thief, you have no firewall, anti virus or whatever running then it's like leaving your car key in the ignition and the door wide open. Then set up a whitelist of trusted senders and only allow email from them. Have your email program autodelete the rest. OK, sometimes a few genuine emails are missed but it's better safe than sorry. If you're signing up to something then include them in your whitelist so their email reaches you, you can always remove or block them later if need be. If you have a wifi router, change your password regularly. Hackers and crackers are finding their way in easily through wifi points and turning computers into zombies. These bots are everywhere, they are attacking the ableton live forum with crap about online sex videos and buy xanax online regularly. Dmusic seems pretty tame in comparison, but you're correct to be concerned.
Opossum	Date: July 20, 2007 @ 6:13 AM Send me ten million billion trillion US dollars and I will sincere to problem this fix. Oh, I am so scarey to your much benefits. I shall now Apollo's eyes for this. P.S. I hate bots!
MickeyBreezy	Date: July 20, 2007 @ 9:58 AM yea, nothing is gonna completely stop this shit though, as soon as they find a way to stop them, the hackers find away around it, so i've grown to just ignore it all.
joycedavis	Date: July 20, 2007 @ 10:05 AM that suckss. save darfur jd
pullmytrigger	Date: July 20, 2007 @ 2:28 PM yeah somebody from where im from got scammed.. bunch of bullshit.. although she should have know better
johnnygnote	Date: July 21, 2007 @ 4:43 PM Ok so it's obvious there is a problem (with these scumbags) and I've dealt with it over the years in many ways from changing my email addresses to blocking address after address, and sending info to many so called report thsi crap sites. But!! here on Dmuisc there should be a level of protection from people using the servers as a way to infiltrate people's sites, emails and confidence in the site servers. I run 2 internet radio stations and I have several websites and I know that this sort of thing can be avoided. It's not my probelm to fix it but I can do one thing and that is to withdraw from Dmuisc. I don't want to because I like it here and have been on Dmusic since 2003. This is the first problem like this I have encountered and would hope that Dmusic could offer some level of protection from this sort of thing. Now if people want to make fun of it and act like it's a part of life and there's nothing you can do about it fine. BUT!!!! I refuse to be a victim of Jack asses and criminals who do nothing more that take advatage of peoples Naivity. If we just roll over and play dead or stick our heads in the ground in denial then we deserve what ever crap falls in our laps. I for one hope there is something that can be done to avoid this in the future. So I ask Support to please involve themselves a bit more in this conversation. Thanks.
Rodrica	Date: July 22, 2007 @ 4:13 PM I hope it doesn't sound as though we complaining without a good reason - but from what a number of people have told me, I believe there may be a problem here, which JG has highlighted and confirmed. Our purpose in mentioning potential problems is to avoid DM being associated with the problems that blight mysp*ace, thus maintaining a superior music site.
pog	Date: July 22, 2007 @ 5:34 PM unless you post the header of the e-mail in a public forum for them to extract the information from :rolleyes: or post your e-mail address somewhere. A link could be posted to a dangerous site, but thats about as far as it could possibly go. " id="272082">The e-mail would not have been "generated" by dmusic.. the message content would have been forwarded using the form on your artist page that says "e-mail this artist". There is no way that the person who e-mailed you could have seen the e-mail address that it is going to... unless you post the header of the e-mail in a public forum for them to extract the information from or post your e-mail address somewhere. A link could be posted to a dangerous site, but thats about as far as it could possibly go.
Rodrica	Date: July 22, 2007 @ 5:52 PM Pog...I'll note you regarding a problem which is associated with the DMusic system and you can let me know if you think DM should continue with the service given the info. I'm about to send you
kyodylee	Date: July 22, 2007 @ 11:07 PM Rodrica is right. I've also mentioned this backdoor access before. And it's right on an artist's page, not all, but some who have the service. I was able to get johnnygnote's email address in 1/2 second flat. This really should be looked into.
ChillinBuzz	Date: July 23, 2007 @ 8:01 AM I mentioned limiting non-logged in users' accessibility on this site ages ago. My reasoning back then was that bandwidth would be significantly reduced... But this is a far better reason for doing so. Other sites employ similar methods of restricting areas and details when not logged in (or being on an artist/friend's list) so why aren't we doing the same?
johnnygnote	Date: July 23, 2007 @ 8:29 PM Ok so what Pogs saying is the Email this artist link on my music page could be the probelm, but this is the page it goes to when I click on it http://johngarza.dmusic.com/email and the email I use in the artist area is not the one I received the email at. In fact it's my account settings email for my non musician User page and nowhere on my User page is there a way to access that email address. Sooooooooooo What Gives??? Also I did a test email using the email this artist link and there is no way to email me unless you use your email address. So..If thsi si the problem (which I don't believe it is) Then that email option should only work for Members only and not just nayone who comes on the site (unless it already does that) Anyway the pro b I believe is not the email this artist Link, because (once again) the email address is My User Acount email which should be private!
johnnygnote	Date: July 23, 2007 @ 8:34 PM And Oh by the way my email has been breached already so my header doesn't make much dif at this point! And sinced no one wants to address the seriousness of the breach I have no other alternative. Adios
johnnygnote	Date: July 23, 2007 @ 9:03 PM Ok So after running the test on the email link, Even Though!! it states you need to enter your email address it got through. And it went to my user email address not my artist Email address. SO there are some serious problems. I have removed all my tunes info and images and have gone stealth on the site until some changes are made. I hope my friends here understand my position. Privacy unless otherwise noted should be a given and even then there is no excuse for failsafes that don't work. People can think I'm an Asshole but I don't care what people think. So I will be watching and occasionaly poking my nose in to the arena otherwise if you don't know how to contact me your out. (present friends excluded) You know who you are.
kyodylee	Date: July 23, 2007 @ 10:12 PM The problem is with a particular service you were using, not your DMusic email. I just checked, apparently either you or one of the admins turned off the service for you. But, yes, that particular email address has been breeched. You may want to abandon that address and open a new one.
ChillinBuzz	Date: July 31, 2007 @ 8:43 PM That's a fairly impractical method of dealing with this issue though, kyodylee. Why should we have to abandon an email address because of a lack of security surrounding an option here? As spammers, hackers and programmers get more clued up, they'll find ways to beat even the basic deterents in place now, if there are any really. I still say limitations must be imposed on users not logged in, it's far too easy to gleen information, links and burn up the bandwidth yet not even be a part of the site. You can't even view images on MySpaz, for example, unless you log in and even then, a user can privatise them. Someone just step back a moment and think how much money the site could save, it's not like we're going to lose users as they aren't even signed in or registered to start with!
kyodylee	Date: July 31, 2007 @ 10:50 PM I completely agree with you, Chill. I was merely suggesting to johnnygnote that if he was concerned about continuing to receive more spam on his now compromised email address, then he might be forced to abandon it and create a new one. But just like you said, this shouldn't have become necessary in the first place. This particular service is flawed. At the very least, when you sign up for it you should be notified that the email address you use for it will become public knowledge; therefore, you shouldn't use an address that you don't want to be made public.
Opossum	Date: July 31, 2007 @ 10:53 PM Just recently, we've been getting a LOT of these scams in PDF format. What's the sense of that? It's often just a few lines.
ChillinBuzz	Date: July 31, 2007 @ 11:29 PM I never tested it during the redesign, although the artist section wasn't something I really worked on, so I have no clue about how it functions really. Best thing for it would be to go via DMusic, where a filter could be used. Most major email providors have this... No worries, Kyodylee. I'm just up for some heated debate tonight.
johnnygnote	Date: August 1, 2007 @ 11:08 AM Thanks guys (especially you Chill) for taking another look at the problem,I've worked with computers for over 20 years and seen a lot of changes so, I'm quite familiar with filters and such. Kyodylee, I have over 10 email addresses because of this very reason. On occasion I have to create a new one for a safe haven. I'm just getting tired of doing so and migrating info every so often. Some3 how Dm could improve things on the security level to protect the users (non subs as well as subs) I like DM but there are times we have to take a step back from something when there is concern. Thanks again.
jack	Date: August 1, 2007 @ 7:32 PM This issue will be resolved in the next code release.
jack	Date: August 1, 2007 @ 7:34 PM (As in, it has been addressed, and a fix put in place, but the code isn't live yet.)
johnnygnote	Date: August 1, 2007 @ 10:49 PM Thanks Jack Looking forward to the fix, I'll rebuild my page when it happens. This has been a blessing in disguise, need to do some house cleaning and rethinking the page.
ShadowMom	Date: August 2, 2007 @ 12:36 PM Jack is quiet but deadly... okay, efficient.

Post A Reply
From:	Guest	(Icons - Linking)
Post: