Elamb Cybersecurity

Tag: google

  • scam GOOGLE OFFICIAL NOTIFICATION LETTER.

    Scam – “GOOGLE OFFICIAL NOTIFICATION LETTER” – this is not even from Google.  It claims that you are getting some money, but needs your personal information.

    DO NOT send these people information

    Google Inc. World Headquarters
    1600 Amphitheatre Parkway
    Mountain View, CA 94043
    Phone: +1 650-253-0100
    Fax: +1 650-253-4201
    Ref No: GFSP/ 7748/782/2016
    Batch: GFSP/ 955/GPWIN/UK

    OFFICIAL NOTIFICATION LETTER.

    It is obvious that this notification will come to you as a surprise but please find time to read it carefully as we congratulate you over your success in the following official publication of results of the E-mail Electronic Online Sweepstakes Organized by Google, in conjunction with the foundation for the Promotion of Software Products, (F.P.S.) held on February 1st 2016 here in United States.Google earns its profit mainly from advertising using their very own Google search engine, G.mail , Yahoo,Hotmail ,All E-mail service Google Maps, Google Apps, Orkut social networking and You Tube video sharing, which are all offered to the public for free.

    We wish to congratulate you once again, for being among the Twelve (12) selected winners in the ongoing E-mail Electronic Online Sweepstakes. Hence we do believe with your prize, you will continue to be active in your patronage to Google and its Products. A Bank Draft of 950,000.00 USD{Nine Hundred and Fifty Thousand United States Dollars} will be issued in your name by our Foreign Payment Bureau and also a certificate of prize claim will be sent alongside your Bank Draft.

    You are advised to contact our Foreign Payment Bureau with the following details below for the Processing of your Claims:

    FOREIGN PAYMENT RELEASE FORM.

    (1)Your Contact Address:
    (2)Your Contact Telephone/Mobile Number:
    (3)Your Nationality/Country:
    (4)Your Full Names:
    (5)Occupation:
    (6)Age/Gender:
    (7)Marital Status:
    (8)Private Email Address:
    (9)Ever Won An Online Lottery?
    (10)How Do You Feel As A Winner?

    Mode of Price Remittance.
    (1) Bank To Bank Wire Transfer.
    (2) Courier Delivery Of your Certified Winning Cheque in your Name and other Winning Documents safely to you.

    …………………………………………………………………………………………………

    Contact our Foreign Payment Bureau officer below: Brian Hookson
    Senior Vice President and Chief Financial Officer with the E-mail accounts as follows:
    Email: goolgleverifydept@163.com

  • More GMAIL Problems

    This was news I could not ignore because I really, really like Gmail. These hacks are ridiculous. I hope that google is getting a handle on this. It looks like the accounts are getting hacked with some sort of script that runs from a site or email while gmail is opened:

    According to David Airey & gnucitizen.org:
    The victim visits a page while being logged into GMail. Upon execution, the page performs a multipart/form-data POST to one of the GMail interfaces and injects a filter into the victim’s filter list. In the example above, the attacker writes a filter, which simply looks for emails with attachments and forward them to an email of their choice. This filter will automatically transfer all emails matching the rule. Keep in mind that future emails will be forwarded as well. The attack will remain present for as long as the victim has the filter within their filter list, even if the initial vulnerability, which was the cause of the injection, is fixed by Google.
    — gnucitizen

    As many of you already know on November 2nd, MakeUseOf.com’s domain was stolen from us. It took us about 36 hours to get the domain back. As we have pointed out earlier the hacker somehow managed to get access to my Gmail account and from there to our GoDaddy account, unlock the domain and move it to another registrar.

    You can see the whole story on our temporary blog makeuseof-temporary.blogspot.com/

    I wasn’t planning to publish anything about the incident or cracker (person who steals domains) and how he managed to pull it off unless I was completely sure about it myself. I had a good feeling it was a Gmail security flaw but wanted to confirm it before posting anything about it on MakeUseOf. We love Gmail and giving them bad publicity is not something we would ever want to do.

    Now the thing is the domain name domainsgames.org is protected by Moniker and they hide all the contact info for it.

    Domain ID:D154519952-LROR
    Domain Name:DOMAINSGAME.ORG
    Created On:22-Oct-2008 07:35:56 UTC
    Last Updated On:08-Nov-2008 12:11:53 UTC
    Expiration Date:22-Oct-2009 07:35:56 UTC
    Sponsoring Registrar:Moniker Online Services Inc. (R145-LROR)
    Status:CLIENT DELETE PROHIBITED
    Status:CLIENT TRANSFER PROHIBITED
    Status:CLIENT UPDATE PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:MONIKER1571241
    .
    .
    .
    .
    Name Server:NS3.DOMAINSERVICE.COM
    Name Server:NS2.DOMAINSERVICE.COM
    Name Server:NS1.DOMAINSERVICE.COM
    Name Server:NS4.DOMAINSERVICE.COM

    More at Makeusof.com

    The Google Fix