SRL Archive - Senior Discussions and Debates

Came across this thread, seems like we have a new type of spam bot on our hands and is quite a problem for SSRL since we can't actually see the private messages. Ive banned them all as it looks pretty obvious to me that their up to no good, also quite sure the link is Wizzups official link but hyperlinked to a file upload site which will download a rat.

Yikes, that's pretty bad considering it's a under the radar (even from mods or admin - unless they check it out) from the public eye.

Would it be worth it for me to say/bring up to what I'm sure is an old topic somewhere, that something should be limited to new users and private messages with links in them?

From: Le Jingle
Yikes, that's pretty bad considering it's a under the radar (even from mods or admin - unless they check it out) from the public eye.

Would it be worth it for me to say/bring up to what I'm sure is an old topic somewhere, that something should be limited to new users and private messages with links in them?

That's a good idea but i think for now we need some sort of announcement warning people. Also they could get smarter and only PM registered users, that way near enough no one will report them. :/

Hmm, I agree getting this warning out there is indeed a good idea. It will help any forum regular to be able to be aware of the malicious links/PM's and quite possibly help out new comers whom are targeted too.

From: Ollybest
Came across this thread, seems like we have a new type of spam bot on our hands and is quite a problem for SSRL since we can't actually see the private messages. Ive banned them all as it looks pretty obvious to me that their up to no good, also quite sure the link is Wizzups official link but hyperlinked to a file upload site which will download a rat.

I'm also aware of that.. I was like wtf.. so I hovered over the link and looked at the status bar.. Bam.. fake link. Looked so legit though! The link pointed to some FileDen.com or something like that. They should not be able to disguise links like that.

Banned three more of these. "Update Simba, Updated, Update_Bot"

From: Ollybest
Banned three more of these. "Update Simba, Updated, Update_Bot"

Thanks, I just re-visted and found a message in my inbox containing a linked message from Updated.

Just banned another one.. http://villavu.com/forum/member.php?u=129582

Thanks to Sjoekeloe.

Warning to the whole of the SRL Community;

As you know every now and then we get some spam bots at our forums. Despite our best efforts some still manage to get through our sign up securities. We deal with these easily enough as they come along, but there is now a new threat to security - Bots that send out private messages that are made to look like legit updates to Simba. We are currently aiming to find a way to stop this from happening, for the time being and for the future take good note of this:

Only trust official updates. Updates to Simba by Simba Developers (they have the Simba Icon under their name), updates to SRL by SRL Developers (they have the rotating gears under their name). These are official. If you wish to engage in code pulling and pushing make sure you know who you are pushing and pulling from and read through the code you push and pull especially if you don't know the person.

Most of all, do not trust someone who is not of rank and yet sends you an official update. We do not do it in this way. Official Simba updates can be downloaded directly from the Simba Client, you do not need to be downloading any more .exes or .zips and if someone does send you a private message to an "official update" please report the private message by using the report button.


————–
Somebody copy and past that and stick it somewhere nice and shiny, preferably an announcement

If (Message.Contains(HyperTextLink) && Sender.PostCount < 10) Then
Message.NeedsApproval := True
Else
Message.Send();

Iunno :S Seems legit..

From: Brandon
Iunno :S Seems legit..

From past experience with vBulletin, I would not be surprised if it wasn't that simple to implement properly.