1. The trade part of Lethal Zone has fully been taken over by FoG (Fortress of Gamers) and this site can no longer be used to make appeals. If you feel that your tag is unjust, please file an appeal over at https://f-o-g.eu.trade instead.

Phishers and their links - post account details & link here

Discussion in 'Trade Chat' started by Chride2k8, Mar 7, 2014.

Thread Status:
Not open for further replies.
  1. DataStorm

    DataStorm Registered

    Joined:
    Jan 5, 2010
    Messages:
    2,014
    Likes Received:
    64
    Re: Phishers and their links - post account details & link h

    watch out for new type of phishers:

    <a class="postlink" href="http://i.imgur.com/q4pZ9Wd.png" onclick="window.open(this.href);return false;">http://i.imgur.com/q4pZ9Wd.png</a>

    And some discussion on Reddit: <a class="postlink" href="http://www.reddit.com/r/DotA2/comments/26yabh/scammers_using_a_new_way_to_bypass_the_url/" onclick="window.open(this.href);return false;">http://www.reddit.com/r/DotA2/comments/ ... s_the_url/</a>
     
  2. Tom Reeves

    Tom Reeves Registered

    Joined:
    Sep 3, 2013
    Messages:
    180
    Likes Received:
    3
    Re: Phishers and their links - post account details & link h

    | steamname: [unassigned]
    | steamID32: STEAM_0:1:20139780
    | steamID64: <a class="postlink" href="http://steamcommunity.com/profiles/76561198000545289" onclick="window.open(this.href);return false;">http://steamcommunity.com/profiles/76561198000545289</a>
    | customURL:
    | steamrep: <a class="postlink" href="http://steamrep.com/profiles/76561198000545289" onclick="window.open(this.href);return false;">http://steamrep.com/profiles/76561198000545289</a>
    Code:
    steancommuunity.com/id/pvinhaaa
    
     
  3. Tom Reeves

    Tom Reeves Registered

    Joined:
    Sep 3, 2013
    Messages:
    180
    Likes Received:
    3
    Re: Phishers and their links - post account details & link h

    Found another one:

    | steamname: Jessy
    | steamID32: STEAM_0:0:94518848
    | steamID64: <a class="postlink" href="http://steamcommunity.com/profiles/76561198149303424" onclick="window.open(this.href);return false;">http://steamcommunity.com/profiles/76561198149303424</a>
    | customURL:
    | steamrep: <a class="postlink" href="http://steamrep.com/profiles/76561198149303424" onclick="window.open(this.href);return false;">http://steamrep.com/profiles/76561198149303424</a>
    Code:
    steamcomnmunitly.com/id/Fenix138/
    
     
  4. 300_Angry_Kittens

    300_Angry_Kittens Registered

    Joined:
    Jul 27, 2010
    Messages:
    2,304
    Likes Received:
    5
    Re: Phishers and their links - post account details & link h

    Seems to be a new type of scam, had 2 today. Both added me directly, one sent me a message and the other posted a comment on my wall. Contains a link to a tiny picture, when you click on the picture to see a "bigger version" it downloads an SCR extension file.
     
  5. rswallen

    rswallen Wizzard

    Joined:
    Apr 29, 2013
    Messages:
    488
    Likes Received:
    18
    Re: Phishers and their links - post account details & link h

    SCR = EXE (ie opening it will execute it as a program)

    Ye never come across them myself before this but seems to be a specific extension for screensavers.
     
  6. DataStorm

    DataStorm Registered

    Joined:
    Jan 5, 2010
    Messages:
    2,014
    Likes Received:
    64
    Re: Phishers and their links - post account details & link h

    On Steamrep forums they are posting every day such:

    [​IMG]

    The image there in their posts link to some site that hosts a .scr file in auto-download, the small image is hosted on imgur.
    Measures we had to take:
    - Mattie changed parsing any known malware URL they used so far to change the url so the link won't work anymore.
    - Mattie changed automatically text to have a header that it is "mallware", but that mainly is because their text is always the same, hence he could do that.
    - admins and mods are all warned to handle it with the "SPAM" button, and let it delete everything and ban the f*****s etc.
    - If a new URL pops up, we warn mattie, to add it to the blacklist to let it be auto-parsed to a different link.
     
  7. DataStorm

    DataStorm Registered

    Joined:
    Jan 5, 2010
    Messages:
    2,014
    Likes Received:
    64
    Re: Phishers and their links - post account details & link h

    We had the last couple of days some 100 accounts created on SR, by spambots, all registered to [email protected] / [email protected] / [email protected] mail addresses. Those cannot register anymore with us. We've banned all accounts that where having "random" names like username "sa35qyuz" with "[email protected]" as mail address.

    Annoying bastards.
     
  8. Yolbe

    Yolbe Registered

    Joined:
    Jan 15, 2012
    Messages:
    461
    Likes Received:
    43
    Re: Phishers and their links - post account details & link h

    It's the 5th try that somebody tries to phish me.

    They post this on every Steam wall they can find: "Hey, sorry to bother you, I recently started to play TF2 and I need some help in unboxing an unusual. Could you help me and look at this picture *INSERT PHISHING LINK HERE* Thanks and blablabla".
    Just click on the "Delete" button right next to his comment or report them instantly to steam support.

    This could be really dangerous, some months ago they added you and tried to send you to the wrong webside, now they don't even have to add you.

    If you are new in trading: Do never klick on a suspicious link and NEVER enter your password on a webside which someone sends you.
     
  9. Biber

    Biber Registered

    Joined:
    Mar 21, 2011
    Messages:
    869
    Likes Received:
    33
    Re: Phishers and their links - post account details & link h

    Herppi: hello
    Mr.Donut: Hello, my name is Anna , I'm looking for a friend to play together and communicate ))
    Mr.Donut: I am 19 years old and I live in Russia
    Herppi: uh huh
    Mr.Donut: This is my photo -
    Code:
    http://8b.kz/IMG_03112014_1942422
    Herppi: lolno.jpg
     
  10. Yolbe

    Yolbe Registered

    Joined:
    Jan 15, 2012
    Messages:
    461
    Likes Received:
    43
    Re: Phishers and their links - post account details & link h

    Brad: add this guy for trade,he just can't add you for some reason...
    htt /steamcommurniti.com/id:/FAtmangoodtrader228 PS: I removed the http://
    ^ Do not klick this link ^

    | steamname: Brad
    | steam3ID: [U:1:61706691]
    | steamID32: STEAM_0:1:30853345
    | steamID64: <a class="postlink" href="http://steamcommunity.com/profiles/76561198021972419" onclick="window.open(this.href);return false;">http://steamcommunity.com/profiles/76561198021972419</a>
    | customURL: <a class="postlink" href="http://steamcommunity.com/id/pittbrad" onclick="window.open(this.href);return false;">http://steamcommunity.com/id/pittbrad</a>
    | steamrep: <a class="postlink" href="http://steamrep.com/profiles/76561198021972419" onclick="window.open(this.href);return false;">http://steamrep.com/profiles/76561198021972419</a>


    [​IMG]

    This guy was since a month in my friendlist. I guess the new method is -> Adding random player, waiting a couple of weeks saying nothing, try to phish.
     
Thread Status:
Not open for further replies.