phpBB Support (Fraud Email)

kas
Administrator

I no longer do indepth security inspections. Now this is more of a hobby I do in my spare time.

Posts: 783
Are you a spam fighter?: YES

phpBB Support (Fraud Email) May 7, 2012 21:56:41 GMT -5

Quote

Post by kas on May 7, 2012 21:56:41 GMT -5

I got this email sent to me which screamed fraud to me:

Return-Path: <phpbbaid@gmail.com>
Received: from epwork.com ([76.191.96.112])
Received: (qmail 3680 invoked by uid 48); 7 May 2012 13:12:47 -0000
Subject: phpBB Support
X-PHP-Script: 76.191.96.112/~admin/cc/ccmail/admin.php for 41.43.128.229
Date: Mon, 7 May 2012 17:12:47 +0400
From: phpbbaid@gmail.com

Dear customers,

We encourage you to update your phpBB forums to the latest version as it prevents many security bugs and make your forum stable.
There are many anti-spam methods to prevent the spambots registeration and posting , please pick up one of these mods to keep your forum clean

We provide paid services , if you want our assistance please reply to us and we will be happy to put all our efforts and experience for your help
we can help you in updating , mod installation , styling your forum with a unique style and solve any other problem you may face

Thank you .

Indicators that scream out to me:

Spaces after commas don't seem professional like you would expect from a big business like makes of phpBB forums
You would think the email would personally address you where as this one just says "customers"
I found this line in the source code suspicious: "X-PHP-Script: 76.191.96.112/~admin/cc/ccmail/admin.php for 41.43.128.229"
Why would phpBB use gmail?
What is epwork.com?
41.43.128.229 is in Africa

The only way to protect yourself is to arm yourself with knowledge. When you relax and expect others to protect you, they usually drop the ball. So this is why I do what I do.
.

kas Administrator I no longer do indepth security inspections. Now this is more of a hobby I do in my spare time. Posts: 783 Are you a spam fighter?: YES	phpBB Support (Fraud Email) May 7, 2012 22:01:54 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by kas on May 7, 2012 22:01:54 GMT -5 Found out the truth here: www.phpbb.com/support/scam-warning/
	Last Edit: May 7, 2012 22:15:59 GMT -5 by kas The only way to protect yourself is to arm yourself with knowledge. When you relax and expect others to protect you, they usually drop the ball. So this is why I do what I do. .

kas
Administrator

I no longer do indepth security inspections. Now this is more of a hobby I do in my spare time.

Posts: 783
Are you a spam fighter?: YES

phpBB Support (Fraud Email) May 8, 2012 12:35:15 GMT -5

Quote

Post by kas on May 8, 2012 12:35:15 GMT -5

Another today with this in the source:

Return-Path: <phpbbaid@gmail.com>
Received: from epwork.com ([76.191.96.112])
Subject: phpBB Support
X-PHP-Script: www.epwork.com/cc/ccmail/admin.php for 41.43.128.229
Date: Tue, 8 May 2012 07:44:13 +0400
Message-ID: <caccd990265fe9ac7c231de09df89e1e@www.epwork.com>

Dear customers,

We encourage you to update your phpBB forums to the latest version as it prevents many security bugs and make your forum stable.
There are many anti-spam methods to prevent the spambots registeration and posting , please pick up one of these mods to keep your forum clean

We provide paid services , if you want our assistance please reply to us and we will be happy to put all our efforts and experience for your help
we can help you in updating , mod installation , styling your forum with a unique style and solve any other problem you may face

Thank you .

Last Edit: May 8, 2012 12:36:36 GMT -5 by kas

The only way to protect yourself is to arm yourself with knowledge. When you relax and expect others to protect you, they usually drop the ball. So this is why I do what I do.
.

Post by kas on May 7, 2012 21:56:41 GMT -5

Post by kas on May 7, 2012 22:01:54 GMT -5

Post by kas on May 8, 2012 12:35:15 GMT -5