[PPRAANet] PPRAANet forums sending dangerous ads.

[Dan Scott]

I did see a fictitious user account created about 2 months ago so I deleted
that.  I doubt it will help as there was no activity associated with the
user.

Other possibilities include:
1.  The hosting organization got hacked.  But I would expect something
widespread.
2.  The originating email is a spoofed.  This is a very common technique of
spammers.  See: https://en.wikipedia.org/wiki/*Email*_*spoofing* for a good
overview.

73,
Dan
W0RO

73,
Dan
WØRO
-----
http://www.eQSL.cc/Member.cfm?W0RO

On Sun, Jan 22, 2017 at 3:53 PM, Phillip H. Blanton <phillip at n0tan.com>
wrote:

> Hello all. I don't have all of the details yet, but I was recently
> presented with an evil, spear phishing attempt via a pop-under ad sent
> to my browser via the ad service on the PPRAANet forums.
> (*http://ppraa.forumotion.net/*)
>
> The ad was targeted to me as a Century Link customer. Here's a screen
> shot of the pop-under ad...
>
>
>
> I reported it to Century Link, but they didn't much care. They followed
> the script, "Thank you for reporting this issue, to keep yourself safe
> online please refer to... blah blah blah".
>
> Here's a screen shot of the page info of the pop under ad. Note the
> Referring URL...
>
>
>
> So my warning is to be careful when using the forums. Maybe someone
> should limit who can advertise on the forum page, if possible. If it's
> not possible then the forums need to be moved somewhere safer.
>
> --
> Phillip H. Blanton (NØTAN)
> phillip at n0tan.com
> 719 244-0779
>
>
>
> ______________________________________________________________
> PPRAANet mailing list
> Home: http://mailman.qth.net/mailman/listinfo/ppraanet
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:PPRAANet at mailman.qth.net
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
>