Email getting spammed from VJ site

[Stuart and Thea 95]

A while back I got a notification on here and a message from a user that appeared to be spam. I reported it to the moderators, and was told that it would be dealt with. This happened shortly after I posted a status update.

I'm getting spammed in the email linked to my profile by this user, and was just wanting to let someone here know, so that they can try to make this site more secure from spammers.

This is the email that I got from the spammer, similar to the one I got on here previously:

This article link was mailed to you by: rachaelvenazia@yahoo.com *

The sender included the following message:

Hello.Compliments of the day!How are you ? hope you are doing well, I am Rachael,A lovely and decentgirl,i saw your mail on the email list directory from"http://www.visajourney.com"when i was looking for a reliable and trusted person.I believe we can get acquainted,so if it interests you,I stop here awaiting your responds,and beside i have something very vital to disclose to you,but I found it difficult to express myself here,since it's a public website.I will be very happy,If you can get back to me,through my e-mail Is ( rachaelvenazia@yahoo.com ).A good friendship is the foundation build on other relative things to come.May God bless you as I wait impatiently to read from you through this e-mail address : " rachaelvenazia@yahoo.com "Regards,Rachael.

Millard Sheets' son saves artist's doomed mural at San Jose airport -

By Joe Rodriguez

Mercury News

Like almost everybody else in town, Tony Sheets thought his famous father's mural of old San Jose couldn't be saved from the wrecking ball; Then he simply peeled it off and said, 'My dad's spirit is happy today' View Full Story

Most E-Mailed

(From the last 12 hours)

Former Santa Clara cop convicted in federal case

Review: 'Crazy, Stupid, Love' is funny, smart, fantastic

Blacks, Latinos and women lose ground at Silicon Valley tech companies

Maria Sharapova advances at Bank of the West Classic

San Francisco 49ers try to stay in hunt for Nnamdi Asomugha

http://www.mercurynews.com/top-stories/ci_15480264'>http://www.mercurynews.com/top-stories/ci_15480264

http://www.mercurynews.com

This e-mail was delivered by machines from the following IP addresses [41.214.46.199],[217.156.208.126].

* Please note, the sender's email address has not been verified.

I have also deleted my email from my profile now, to avoid any future issues.

[Ban Hammer 13,340]

I have also deleted my email from my profile now, to avoid any future issues.

exactly why i don't have mine listed.

[rsn 135]

Unless you neglected to check the "make my email private" box, I don't see how someone could gain access to your email address unless you posted it elsewhere on VJ. If there was some sort of attack, I'm sure thee would be lots of users with the same complaint.

[Stuart and Thea 95]

Unless you neglected to check the "make my email private" box, I don't see how someone could gain access to your email address unless you posted it elsewhere on VJ. If there was some sort of attack, I'm sure thee would be lots of users with the same complaint.

I haven't seen a box where I can check this, and just looked around my profile to ensure that it is private. Can you help me out so I can make sure it's clicked?

I don't know how many people this user spammed on here previously, but a large number of us were hit. I was receiving friend requests daily from this user on yahoo, and ignoring them as I did not know who they were, today was the first day that I got an email, and it mentioned VJ, so now I know where she's from. It's THIS part that has me worried for site security: ,i saw your mail on the email list directory from"http://www.visajourney.com"

[rsn 135]

You can mark your email address as private here: http://www.visajourn...=notifications. If you previously had your address listed and did not make it private, that explains your situation. If you do want to make an address public, either use a throwaway accout, or, even better, buy your own domain and redirect all email addresses on that domain to your main address. This way, you can create alias/throwaway addresses on demand with zero effort and simply block all mail from your alias addresses once they become compromized. Otherwise, you will want to closely guard your personal info and only post it if you are sure you are not publicizing it.

Edited July 29, 2011 by rsn

[ScottThuy 140]

I have seen this happen to a few members over the years.. usually when they post an email address in a forum for everyone to see... it doesnt take much for someone to do a query for emails using the VJ search function..

[thongd4me 69]

Just a general word of warning -

if you get an email from an address that you know is that of a friend

but all there is in the content is a cryptic URL or a hotlink of some kind,

it is best NOT to go to the URL or click the hotlink because chances are

that your friend's email account has been spoofed/hijacked.

The best procedure is to delete the entire message and then email

your friend to ask him/her if he/she actually sent the link.

Chances are, they didn't. My wife got an email like that today

and asked me what to do and I just said delete the message.

[Stuart and Thea 95]

You can mark your email address as private here: http://www.visajourn...=notifications. If you previously had your address listed and did not make it private, that explains your situation. If you do want to make an address public, either use a throwaway accout, or, even better, buy your own domain and redirect all email addresses on that domain to your main address. This way, you can create alias/throwaway addresses on demand with zero effort and simply block all mail from your alias addresses once they become compromized. Otherwise, you will want to closely guard your personal info and only post it if you are sure you are not publicizing it.

rsn, I had thought that link was for VJ members to email me here on the board, no? I have a different account for VJ to email me to, and had never put any of my emails in a message, but did have a yahoo account listed in my profile, which I have since deleted. I'm most concerned that the mail said there was a VJ member email list directory. I've looked on the site and could see no such thing, and for a spam bot to search posts is one thing, but profiles??

Thanks though for the link, but can you clarify that it's to block my personal email, and not to block members from being able to email me on the site? I'm fine with one, spam or not, but don't want to see spam in other email sites.

[rsn 135]

rsn, I had thought that link was for VJ members to email me here on the board, no? I have a different account for VJ to email me to, and had never put any of my emails in a message, but did have a yahoo account listed in my profile, which I have since deleted. I'm most concerned that the mail said there was a VJ member email list directory. I've looked on the site and could see no such thing, and for a spam bot to search posts is one thing, but profiles??

Thanks though for the link, but can you clarify that it's to block my personal email, and not to block members from being able to email me on the site? I'm fine with one, spam or not, but don't want to see spam in other email sites.

First off, it looks like you didn't click the "hide my email address" checkbox in the link I sent you. But, upon closer inspection, even with that unchecked, it doesn't look like this allows any members to see you email address. If the checkbox is unchecked, members are allowed to send a message to your actual address, but the address is hidden. They are presented with a short form where they type in their message and VJ forwards it on to your real address. So, this means that you likely, inadvertently posted your email address in a public place on VJ somewhere else, perhaps in a forum post. The other user who received a similar email (off-topic section) did just that. I don't think there is any danger in including your email address in the email address field of your profile. It looks like VJ never reveals that information to the public.

[Stuart and Thea 95]

First off, it looks like you didn't click the "hide my email address" checkbox in the link I sent you. But, upon closer inspection, even with that unchecked, it doesn't look like this allows any members to see you email address. If the checkbox is unchecked, members are allowed to send a message to your actual address, but the address is hidden. They are presented with a short form where they type in their message and VJ forwards it on to your real address. So, this means that you likely, inadvertently posted your email address in a public place on VJ somewhere else, perhaps in a forum post. The other user who received a similar email (off-topic section) did just that. I don't think there is any danger in including your email address in the email address field of your profile. It looks like VJ never reveals that information to the public.

Never posted that email in a forum post, I've searched it on the site to be sure... and no, I didn't click that box yet, as I'm wondering if it is only for that email or also for here... if you can confirm that last part??

[rsn 135]

Never posted that email in a forum post, I've searched it on the site to be sure... and no, I didn't click that box yet, as I'm wondering if it is only for that email or also for here... if you can confirm that last part??

That checkbox only relates to your non-VJ email account. There is another checkbox below it containing the words "personal messenger" that relates to your VJ message box.

[Stuart and Thea 95]

That checkbox only relates to your non-VJ email account. There is another checkbox below it containing the words "personal messenger" that relates to your VJ message box.

Thanks, already tested it and figured it out. Hope this post helps others to firm up their settings. You wanna talk to me, talk to me on here!!! lol!

[rsn 135]

Thanks, already tested it and figured it out. Hope this post helps others to firm up their settings. You wanna talk to me, talk to me on here!!! lol!

I would strongly suggest looking into how your email was leaked. I don't see a way for anyone to scrape your email off of your profile if you have only entered it into the email address section of your settings, since that is not publicized

[Stuart and Thea 95]

I would strongly suggest looking into how your email was leaked. I don't see a way for anyone to scrape your email off of your profile if you have only entered it into the email address section of your settings, since that is not publicized

I had one email address for VJ, which it sends notifications to, and I can reset my password, the other one was for members to email me, which I have now disabled. I would think that some spam bot sent messages by clicking the email link. I can find no email list accessible on here otherwise. I was one of the people spammed by pamale a short while ago, not long after, that email account was getting a lot of unknown friend requests. Today, I've received the message from Rachael 3 times.

I don't use the email for friends, only for forums and lists, so it's not a big issue for me, but I was concerned for this website's security settings, after reading the message. I'm partly tempted to investigate the email and see what it actually does link to...

[I AM NOT THAT GUY 5,715]

I looked at your profile. I didn't see any holes. Them spammers are pretty sneaky. I would do a full virus scan after doing a clean reboot and after deleting all your internet files, temp folders, et cetera, with your internet connection physically disconnected.