1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Possible spam from support@blackhatworld.com

Discussion in 'BlackHat Lounge' started by fatboy, Jul 14, 2012.

Thread Status:
Not open for further replies.
  1. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    Well, thought I would give you all heads up to a spam mail I received supposedly from BHW giving me a free VIP account for life (unless this is real then I will take that VIP ;)):

    ---START---

    Dear fatboy,

    You have been randomly selected to receive FREE VIP status on the BlackHatWorld forums! This is a LIFETIME upgrade, and it's special just for you!

    Please visit : http://goo.gl/xxxxx
    Download your VIP Code, and e-mail it back to us. We will then upgrade your account for life!

    Perhaps you'd also be interested in a $200 INSTAGRAM BOT. It's my (Damien's) private bot, and it's yours for free.

    Download : http://www.mediafire.com/download.php?xxxxxxxxxxxxx

    Run this as Administrator and watch followers pour in. Then monetize those followers and walk away with thousands in CPA Earnings! It's what I did!

    We hope you utilize both of these offers. It's just our way of saying THANK YOU FOR BEING APART OF BLACKHATWORLD! WOO! :)

    ---END---

    So not only whoever sent this giving BHW a bad name, they are actually using Damiens name in there as well.

    Headers for the email:

    Code:
    Delivered-To: blackhatworld@bot*****.com
    Received: by 10.114.24.100 with SMTP id t4csp167304ldf;
            Fri, 13 Jul 2012 16:08:15 -0700 (PDT)
    Received: by 10.182.226.104 with SMTP id rr8mr13390obc.41.1342220894715;
            Fri, 13 Jul 2012 16:08:14 -0700 (PDT)
    Return-Path: <Support@blackhatworld.com>
    Received: from hypervisor.blackhatworld.com ([199.59.60.202])
            by mx.google.com with ESMTPS id e8si8771120oee.25.2012.07.13.16.08.14
            (version=TLSv1/SSLv3 cipher=OTHER);
            Fri, 13 Jul 2012 16:08:14 -0700 (PDT)
    Received-SPF: neutral (google.com: 199.59.60.202 is neither permitted nor denied by best guess record for domain of Support@blackhatworld.com) client-ip=199.59.60.202;
    Authentication-Results: mx.google.com; spf=neutral (google.com: 199.59.60.202 is neither permitted nor denied by best guess record for domain of Support@blackhatworld.com) smtp.mail=Support@blackhatworld.com
    Received: from [199.59.60.197] (port=42639 helo=mail.blackhatworld.com)
    	by hypervisor.blackhatworld.com with esmtp (Exim 4.77)
    	(envelope-from <Support@BlackHatWorld.com>)
    	id 1Spoy5-0000YJ-Vn
    	for blackhatworld@bot*****.com; Fri, 13 Jul 2012 18:08:14 -0500
    Date: Fri, 13 Jul 2012 23:08:12 +0000
    To: blackhatworld@<mydomain.com>
    From: "Support@BlackHatWorld.com" <Support@BlackHatWorld.com>
    Sender: Support@BlackHatWorld.com
    Message-ID: <20120713230812.e15ff275cc5e@www.blackhatworld.com>
    MIME-Version: 1.0
    Content-Type: text/plain; charset="ISO-8859-1"
    Content-Transfer-Encoding: 8bit
    X-Priority: 3
    X-Mailer: vBulletin Mail via PHP
    Subject: BHW Free VIP & More!
    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
    X-AntiAbuse: Primary Hostname - hypervisor.blackhatworld.com
    X-AntiAbuse: Original Domain - xxxxxxxxx
    X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
    X-AntiAbuse: Sender Address Domain - BlackHatWorld.com
    
     
    • Thanks Thanks x 2
  2. ChanzGrande

    ChanzGrande Jr. VIP Jr. VIP Premium Member

    Joined:
    Feb 16, 2008
    Messages:
    2,484
    Likes Received:
    1,158
    Occupation:
    Accountant
    Location:
    Northern Woods Counting Money
    I also received this email, and it was clearly some kind of scam. The goo.gl link simply redirects to a filesharing site, and not even to an actual download...just to the homepage. I hope an admin will speak to this, because with the connection problems lasting about 6-8 hours last night, I'm quite confident BHW was hacked. Perhaps one of the mods can provide a better explanation for why I was spammed with the same message from a support address at bhw?
     
  3. Amsterdammer

    Amsterdammer Power Member

    Joined:
    Aug 9, 2011
    Messages:
    515
    Likes Received:
    563
  4. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    AH cheers - tried to have a search but it kept crapping out on me.
     
  5. Amsterdammer

    Amsterdammer Power Member

    Joined:
    Aug 9, 2011
    Messages:
    515
    Likes Received:
    563
  6. bertbaby

    bertbaby Elite Member

    Joined:
    Apr 15, 2009
    Messages:
    2,019
    Likes Received:
    1,496
    Occupation:
    Product marketing
    Location:
    USA
    Home Page:
    I can't speak for this particular spam but spoofing email addresses is the oldest trick in the book.

    Also was this spam tied into this inquiry that is supposedly from BHW that I posted earlier in the week?

    Dear bertbaby

    I'm excited to announce we are updating our mailing list from our old provider and need you to opt in again to continue your subscription to the BHW mailing list.

    We have received a request from this email address asking for a copy of the BHW newsletter. Before we begin sending you the information you requested, we want to be certain we have your permission.

    -----------------------------------------------------------
    CONFIRM BY VISITING THE LINK BELOW:

    http://www.aweber.com/z/c/?zbwcny03ltpk4upjno9v0xva23clr3965

     
    Last edited: Jul 14, 2012
  7. howard_hughes

    howard_hughes Elite Member

    Joined:
    Jul 23, 2009
    Messages:
    5,048
    Likes Received:
    3,684
    Occupation:
    Just Another Digital Marketer!
    Location:
    "Insta Rank"
    Home Page:
    BHW was hacked and it's probably work of some hacker.
     
    • Thanks Thanks x 1
  8. YugiMutou

    YugiMutou Junior Member

    Joined:
    Oct 27, 2011
    Messages:
    114
    Likes Received:
    153
    Occupation:
    Dreamer
    Location:
    The Matrix
    Well to be safe Im going to delete all my emails from BHW
     
  9. HOmERCIdAL

    HOmERCIdAL Regular Member

    Joined:
    Apr 28, 2009
    Messages:
    348
    Likes Received:
    153
    Yeah got this too, Looked at the headers and IP address and warily clicked the link as my account on here has been hacked before.
     
  10. Diamond Damien

    Diamond Damien Owner BlackHatWorld Staff Member Jr. VIP

    Joined:
    Oct 27, 2005
    Messages:
    55,622
    Likes Received:
    12,440
    Home Page:
    • Thanks Thanks x 2
Thread Status:
Not open for further replies.