Author Topic: Forum is Under Attack by Russian Dating Scam Bots  (Read 5763 times)

Offline Nikita_Sadkov

  • Colonel
  • ****
  • Posts: 286
    • View Profile
Forum is Under Attack by Russian Dating Scam Bots
« on: November 12, 2019, 08:03:46 pm »
Don't click the link! These scam site frequently have embedded viruses!


Offline SupSuper

  • Lazy Developer
  • Administrator
  • Commander
  • *****
  • Posts: 2162
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #1 on: November 13, 2019, 07:06:49 am »
Thanks for letting us know. In the future, report spam directly to an admin or moderator so we can deal with it faster.

Offline Nikita_Sadkov

  • Colonel
  • ****
  • Posts: 286
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #2 on: December 02, 2019, 05:17:25 pm »
Thanks for letting us know. In the future, report spam directly to an admin or moderator so we can deal with it faster.
Ok. But it continues, this time with some tank spam, instead of adult sites. Maybe you can require users to have some forum posts, before allowing them to send PMs? It is doubtful any real person would start mass sending PMs immediately after registering.

« Last Edit: December 02, 2019, 05:34:02 pm by Meridian »

Offline The Martian

  • Commander
  • *****
  • Posts: 754
  • "It implores you to listen to its arguments..."
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #3 on: December 02, 2019, 06:20:16 pm »
But it continues, this time with some tank spam, instead of adult sites.

Thank you for the warning Nikita_Sadkov, I will avoid clicking any strange links sent via PM.

I noticed that strange image icon when I was glancing at the "Who's Online" section of the forum earlier, thought it was a bit curious that it said "Yahoo Instant Messenger - Test, just a test" beside the green light so I snapped a screenshot.



None of the other users that I've seen have there forum "Personal Text" message visible on that screen. I'm not sure if it means anything useful but I figured I'd mention it in case it helps pin down a solution.

Offline SupSuper

  • Lazy Developer
  • Administrator
  • Commander
  • *****
  • Posts: 2162
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #4 on: December 03, 2019, 04:05:22 am »
Ok. But it continues, this time with some tank spam, instead of adult sites. Maybe you can require users to have some forum posts, before allowing them to send PMs? It is doubtful any real person would start mass sending PMs immediately after registering.
We can't snoop on everyone's PMs. :P You gotta tell us when it happens. I've disabled new member PMs just in case.

Offline Anon011

  • Sergeant
  • **
  • Posts: 42
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #5 on: December 04, 2019, 09:40:24 pm »
Russian Dating Scam Bots
Please... any proofs that this spam is of "Russian" origin?

Offline Warboy1982

  • Administrator
  • Commander
  • *****
  • Posts: 2333
  • Developer
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #6 on: December 05, 2019, 09:27:49 am »
Please... any proofs that this spam is of "Russian" origin?
username: "Tusik Vitusikk"
hardly conclusive, but enough to warrant the assumption.

Offline Nikita_Sadkov

  • Colonel
  • ****
  • Posts: 286
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #7 on: December 07, 2019, 04:30:51 pm »
Please... any proofs that this spam is of "Russian" origin?
The fake dating site had Russian girls. It could have been created by anyone, but I personally knew people in Russia who created such sites to defraud foreigners. Nigerians also do that, but they usually identities of western girls and guys (stealing idenity is easy, since people tell everything about themselves on social networks). That and carding are some of the reasons PayPal doesn't work in Nigeria and had been unavailable in Russia for a long time. I've lived in a hostel for some time with a fugitive from Nigeria, hiding in Eastern Europe. He did carding stealing US citizens identities, cashing out money in Ukraine. Reported him to local Interpol - they don't care.

So yeah, be careful - avoid suspicious sites, because browsers have 0day vulnerabilities, which allow stealing your passwords and card numbers.

Offline Yankes

  • Global Moderator
  • Commander
  • *****
  • Posts: 3350
    • View Profile
Re: Forum is Under Attack by Russian Dating Scam Bots
« Reply #8 on: December 07, 2019, 05:55:22 pm »
And use no-ads and no-script that reduce drastically surface that 0day can exploit.