PDA

View Full Version : A lot of spam masquerading as real posts lately



Corran
8-Apr-2015, 08:15
We seem to be getting a ton of spam posts lately from new users that seem on topic, but have a hidden link on the bottom of the post pointing to some strange webpage. Most commonly I have seen rockbullet (.tk) and a png file which doesn't show up, but I've also seen several other webpages.

I obfuscated the link above because I don't know what it is, so don't go there.

Here's an example - this person has been posting these type of posts for a few weeks now (http://www.largeformatphotography.info/forum/search.php?searchid=4378400).

Notice their posts seem very topical and may even sound legitimate, but some aren't. Probably a fairly advanced bot using terms found on this forum or the thread to sound authentic.

Has this been noticed by anyone else? I reported one of them and it was swiftly deleted but I seem to see at least 4-5 posts from these accounts every couple of days.

Can the forum software delete a post and ban a user automatically if they post a certain string, such as these web addresses?

djdister
8-Apr-2015, 10:20
Yes, and I report them as fast as I can. The hidden links and small (or invisible) image files are "web bugs" (http://en.wikipedia.org/wiki/Web_bug) which someone is using to track every person who reads or replies to the post. Not a good thing.

Corran
8-Apr-2015, 10:46
web bugs

Ah, I see. A friend of mine is a big marketing guy and uses those in his emails. I hadn't thought of that being what they were here. Good catch!

Randy Moe
8-Apr-2015, 11:04
I don't think my mail web tracker works here, but it does show when people read my gmails, which is very handy and freaks them out when you respond saying you saw that they read it.

I am using a demo version of Hub Spot (http://offers.hubspot.com/demo-ad?source=hspd-ppc-brandname-ska6-kw-hubspotdemo-ad1-demo-mar2015&gclid=CPnIpP6k58QCFUokgQodXwIA6w), that's a hot link to their site.

This is why the very cautious don't open anything.

Now nobody will open my links...and I definitely mean no harm!

A web of worms. :(

Ralph Barker
9-Apr-2015, 06:21
When such posts are reported, we can use the forum's "Spam-o-matic" feature that deletes all the offending user's posts, bans them, and reports them to the Stop-Forum-Spam database. I don't believe the forum software includes a feature to do this automatically when such a post is made.

Old-N-Feeble
9-Apr-2015, 07:30
I recently reported a couple of posts that appeared a bit "off". One I commented was SPAM but then I wasn't sure so the other I asked if it was SPAM. The bottom line is the PHISHers are getting to darned good.

Ralph Barker
9-Apr-2015, 09:21
I recently reported a couple of posts that appeared a bit "off". One I commented was SPAM but then I wasn't sure so the other I asked if it was SPAM. The bottom line is the PHISHers are getting to darned good.

Yes, sadly, it's a never-ending battle.

Liquid Artist
14-Apr-2015, 00:36
3 or 4 weeks ago I received an email saying I had a PM here.
When I went to read it, it was gone.
So I imagine it was from a spammer, and the mods have the ability to delete from our PM boxes.

rdenney
15-Apr-2015, 14:28
3 or 4 weeks ago I received an email saying I had a PM here.
When I went to read it, it was gone.
So I imagine it was from a spammer, and the mods have the ability to delete from our PM boxes.

You are probably correct, but, just for general information, we can't delete specific emails from specific PM boxes. When we remove spammers, we remove them utterly (see Ralph's prior post), including all their PMs, using an automated process. We can't see what PM's have been sent by users, and we can't read PMs. So, the email you received was not spam, but the PM to which it referred might indeed have been.

Rick "SPAM in the can" Denney

David A. Goldfarb
15-Apr-2015, 15:06
We've been seeing a fair amount of this on APUG for the past several months. One common ploy is to cut and paste a passage from somewhere else in a long thread, so it is even topical, but then someone realizes that it's been ported from their own post or one they've read, and they get reported, so that we can ban the poster and delete all their posts at the same time. Another tactic is to post something so vague and generic that they hope no one will notice.

RHITMrB
24-Apr-2015, 11:26
We have another one - user "lisacarmelr" has been posting this stuff again.

richardman
24-Apr-2015, 13:02
It begs the questions though - presumably eventually they want to sell us something. What would LF photographers be interested in buying? :-)

rdenney
24-Apr-2015, 21:25
We have another one - user "lisacarmelr" has been posting this stuff again.

I zapped 'em. Please just hit the report button.

Rick "and don't follow untrusted links" Denney

aRolleiBrujo
24-Apr-2015, 21:47
Don't me, I'm legit! I just haven't done much photography these sad days, and alas, i am to under qualified to comment or critique!! :,(
https://farm3.staticflickr.com/2843/10599601463_e62a146259_h.jpg (https://flic.kr/p/h9DJen)Scorn (https://flic.kr/p/h9DJen) by a.rodriguezpix (https://www.flickr.com/people/67365062@N06/), on Flickr