[jhb] Hacker strikes again.

  • From: "Fossil" <fossil@xxxxxxx>
  • To: "JHB Private Email" <jhb@xxxxxxxxxxxxx>
  • Date: Sat, 10 Jul 2010 15:48:16 +0100

Unfortunately I received four more spam messages today purporting to come
from Frank. This list also got hit by two attempts to post to it.

As with the last posts the author is said to be Frank Turley at a mythical
@aim address. Posts were sent to me at both my bones address and my jhb
address plus this freelists address. In each case the posts were also
directed to other people in broad alphabetical groups - which suggests an
address book has been hacked.

The trouble is that it is probably not Frank's address book that has been
hit. The usual trick is to get at someone's address book then pick a name
from this at random (in this case Franks) and then sent out spam using this
as the false source.

It is also obvious that the hacked address book comes from someone connected
with Flight Sim (as previously thought) because I recognise many addresses
from early FS days and the UK scenery group. 

The post sent to HC@xxxxxxxxxx also went to other G-H-I addresses:

greg.jones@xxxxxxxxxxx, 
Hal@xxxxxxxxxxxxxx, 
Hargreaves.Ian@xxxxxxxxxxxxxxx, 
haroon@xxxxxxxxxxx, 
HC@xxxxxxxxxx, 
help@xxxxxxxxxxxx, 
helpline@xxxxxxxxxx, 
hjcurtis@xxxxxxxxxxxx, 
hughturley@xxxxxxxxxxx, 
i.gallacher@xxxxxxxx

The post sent to bones went to J-K-L addresses:

bones@xxxxxxx, 
john@xxxxxxxxxxxxxxxxxx, 
jud6e@xxxxxxxxxxxxxxxx, 
k.roberts@xxxxxxxxxxxxx, 
Katherine@xxxxxxxxxxxxxxxxx, 
humphreyskim@xxxxxxxxxxx, 
kirsty.cullen@xxxxxxxxxxx, 
library-files-owner@xxxxxxxxxxxxxxx, 
library-files-request@xxxxxxxxxxxxxxx, 
Lisa.Horn@xxxxxxxxxxxxxxxxxxxx

And the post to Freelists went to M-N addresses:

Miguelbernardo@xxxxxxxxxxx, 
mikemasser@xxxxxxxxxxxxx,
monirgeadah@xxxxxxxxxxxxxxxx, 
music__studio@xxxxxxx, 
jhb@xxxxxxxxxxxxx,
nglossop@xxxxxxxxxxxxxxxx, 
Niall_Byrne@xxxxxxxx, 
albions@xxxxxxxxxxxx,
norman@xxxxxxxxxxxxxx, 
norman_swardeston@xxxxxxxxxxx

I recognise a few of the addresses above - Howard Curtis, Monir, John
Farrie, Norman Blackburn, Ken Jude, Ian Gallagher - plus there are help
lines for Saitek and Avsim included (the hacker was obviously too lazy to
remove these).

Sadly I don't think there is anything we can do about this hacking. It would
be a stroke of pure luck if we were to find our mutual friend who might have
Niall Byrne, Lisa Horn and others in his address book. Having said that the
FS world is almost solidly a male environment so I guess the three or four
female names on the above list would track the owner down fairly rapidly -
if only we knew where to start.


bones
bones@xxxxxxx


Other related posts: