Sylmar Hang Gliding Association

There is a virus being spread via the SHGA forum from a new user name JamesCutter. This user is sending PMs with a clever link to an ingenious website that tries to load malware onto PCs. I just got nailed by it but Kaspersky caught it.

Please delete any PMs from this fake user.

http://www.shga.com/forum/phpBB2/profil ... file&u=622

Here's a photo of the fake message............

Yup. I was sent it as well, but didn't click on the link because there's no way the club has an external site that does that.
(The bad thing is 'Cutter' is in SHGA so people will probably think it's real.)


Allen

Ya. I got the same message via email. Fortunately my computer blocked the link that was indicated. I should have known it was bogus.

David Haight
SBSA

ps I see that you have a thriving club and website CONGRATS! Just keep an eye on the spammers, they hit us too!

I just went to my messages ,I received it as well ,Thanks Nme good looking out.

Why not send a private message to all members right away? Let them know about this problem before it's too late. Some members might not have good anti-virus protection. And delete the member who's computer is sending the spam. If it is a legitimate member, re-register him.

Hey Seahawk, thanks for saving my butt. I got your e-mail just before that clown's arrived. Deleted! Thanks again.

To all:

Sorry for the spam! Jeff Chipman has deleted the bogus account as well as a number of other apparently bogus accounts. Thanks Jeff!

Hopefully that is all for the time being. All should remember, any email not addressed personally to yourself is suspect. This includes mail addressed to Dear "your email account" and signed by "The Management". Similar tactics include email signed by "Your Quicken Account Team", "Your Wells Fargo Account Manager" and "Your management team" etc. No one in the SHGA will suspend your account without taking personal steps to communicate with you.

The usual approach taken with these attacks is to mine the directory for email addresses and logins and then use that directory to create "trusted" names as senders. Here, the social engineering was making you believe that spam originated in your computer which is entirely possible in these times. In this case even my wife was snookered into clicking on the link.

IF YOU CLICKED ON THE LINK CHANGE YOUR PASSWORD NOW !!! Scan your computer with current anti-virus, anti-spam software. And of course make sure that your operating system is up to date.

Sorry for the annoyance.

Regards,

Mike Moacanin

I didn't click on the link, but I did chuckle a bit,

Freedom is linux, linux is free!

Another good anti-virus is NOD32 by Eset. I highly recommend it.