Thu, Jan 9, 4:12 PM CST

Renderosity Forums / Community Center



Welcome to the Community Center Forum

Forum Moderators: wheatpenny Forum Coordinators: Anim8dtoon

Community Center F.A.Q (Last Updated: 2025 Jan 09 12:11 pm)

Forum news, updates, events, etc. Please sitemail any notices or questions for the staff to the Forum Moderators.



Subject: Has your rosity email been lifted by spammers?


prodev ( ) posted Sun, 08 July 2007 at 8:52 PM · edited Thu, 09 January 2025 at 2:46 PM

Hi...
I noticed a sudden increas in the mount of spam I get. As it was addressed to an address I use at 3d related sites I was a bit disturbed...and changed my address at rosity, daz, and a few others. Then...a whole new wave of spam to the recently changed address :(

So I changed them all again... this time to rosity@, daz@ etc etc... and waited.

Sure enough after several weeks of waiting the rosty@ address is now being bombarded by spam.

I've emailed the admins, and am waiting for a response.

This really isn't good enough! It's either very poor security... or sheer profiteering from onselling the email database with OUR addresses!.


TrekkieGrrrl ( ) posted Mon, 09 July 2007 at 4:21 AM

This is interesting, to say the least.

I've used that method elsewhere (the [sitename]@[mydomain]) and found interesting things that way, too.

And I do get truckloads of spam every day (several hundred spam mails, it's a PITA!) but I hadn't considered if any of it was originating from Rosity. I think I'll do what you did and change my email adress here, then sit and wait...

FREEBIES! | My Gallery | My Store | My FB | Tumblr |
You just can't put the words "Poserites" and "happy" in the same sentence - didn't you know that? LaurieA
  Using Poser since 2002. Currently at Version 11.1 - Win 10.



gillbrooks ( ) posted Mon, 09 July 2007 at 5:07 AM

This has been addressed a couple of times in the last few months.

There are several people, me included, who have dedicated rosity@ addresses that keep receiving spam - I've changed mine twice and it still keeps coming in, yet my daz,poserpros etc addresses are still spam-free.

Those other threads came to nothing as all we get in reply is flannel so I presume this thread will just go exactly the same way  :mad:

Gill

       


Acadia ( ) posted Mon, 09 July 2007 at 5:09 AM

Yes, putting your email address here at Renderosity will result in you getting gads of spam.

I made the mistake of using my Outlook Express address here, and only here.  The only time I ever use that particular address is for business contacts/correspondence and in the 7 years I had that address I never received a single, not one single spam mailing.  Then I used it here and I started to get spam.  That email has never been used for any other website but this one, and I've since changed it to a gmail address. However, the damage has been done and my Outlook Express address has gotten out there and now I get spam on a daily basis to that email address.

I'm not at all pleased about that!!!

"It is good to see ourselves as others see us. Try as we may, we are never
able to know ourselves fully as we are, especially the evil side of us.
This we can do only if we are not angry with our critics but will take in good
heart whatever they might have to say." - Ghandi



Acadia ( ) posted Mon, 09 July 2007 at 5:11 AM

Quote - This has been addressed a couple of times in the last few months.

There are several people, me included, who have dedicated rosity@ addresses that keep receiving spam - I've changed mine twice and it still keeps coming in, yet my daz,poserpros etc addresses are still spam-free.

Those other threads came to nothing as all we get in reply is flannel so I presume this thread will just go exactly the same way  :mad:

Yep, exactly.  Apparently they did something to their mail server in order to increase the amount of mailings that they can do and as a result it's also resulted in unwanted spam mailings. Will they do anything about it? Probably not.

"It is good to see ourselves as others see us. Try as we may, we are never
able to know ourselves fully as we are, especially the evil side of us.
This we can do only if we are not angry with our critics but will take in good
heart whatever they might have to say." - Ghandi



Natolii ( ) posted Mon, 09 July 2007 at 5:57 AM

I am not going to be silent on this. I have a private doamin E-mail I PAY for and do not appreciate the Nigerian Scams and trash I have been receiving. I have another E-mail on this domain that is on a major medical site and I DON'T get the those scams there.

Rendo could learn a lot from DotMED

(PLEASE to not try to tell us that it is not happening. IT is and needs to be investigated before I have my Domain Provider investigate... There is a security hole here...)


AndyWelder ( ) posted Mon, 09 July 2007 at 6:15 AM

Attached Link: Another spam thread

Check out that attached thread, read my reply there and stop spreading "hearsay". Rendo does care about this but *members have their own responsibilities* in avoiding spam.

Oh, and I'm not just another layman but a professional MCSE systems administrator so I know what I'm talking about.

AndyWelder

Groetjes uit Eindhoven!
Send IM::Send Email


Natolii ( ) posted Mon, 09 July 2007 at 6:26 AM · edited Mon, 09 July 2007 at 6:35 AM

Good then maybe you will investigate it more throughly.

The fact remains there is an increase in spam here. Are you going to pay for my domains which you are allowing to be spammed out?

I'm tired of getting talked down to by someone who claims to have the certifications and yet acts like they are superior to the members.

I have taken your steps plus... You want to explain how people have traced the increased spam to Renderosity. People that use have an e-mail set up for use with Rendo only.

For the sake of arguement, I'm going to run a test. I'm going to create an e-mail just for Renderosity. If it gets spammed, then I will be asking my Provider to step in.


AndyWelder ( ) posted Mon, 09 July 2007 at 6:56 AM

I'll repeat the crucial line here: Members systems are most likely infected with trojans generating spam. So what do you think you prove with above mentioned actions?
What guarantees do you have that the system used by the person you sent an email to is not generating spam (with a possible spoofed alias)!!!

AndyWelder

Groetjes uit Eindhoven!
Send IM::Send Email


Natolii ( ) posted Mon, 09 July 2007 at 6:58 AM · edited Mon, 09 July 2007 at 6:58 AM

Because I am a) Not getting it on the other e-mail I have on this system, b) Not getting Spoofed e-mail c) check my mail on the server's webmail client and d) I actively run anti-virus, anti-spyware and Anti-malware in 3 seperate programs.

Next question?


AndyWelder ( ) posted Mon, 09 July 2007 at 7:02 AM

I'm not saying YOUR system is infected!

AndyWelder

Groetjes uit Eindhoven!
Send IM::Send Email


Natolii ( ) posted Mon, 09 July 2007 at 7:11 AM

Then you may want to scan Rendo's system as well. I have a short list of sites I hit. You tell me, why am "I" having issues with spam like everyone else here when BEFORE your upgrade I was not.

As for clicking on e-mails, I drag them right to a junk folder to be deleted.


AndyWelder ( ) posted Mon, 09 July 2007 at 7:26 AM

"As for clicking on e-mails, I drag them right to a junk folder to be deleted."
Repeat: I'm not saying YOUR system is infected!

"I have a short list of sites I hit"
It's not about sites you hit, it's about people you sent mail to, people that thus have your email addy stored on their infected system.

"....BEFORE your upgrade I was not."
What upgrade, there have been several...

AndyWelder

Groetjes uit Eindhoven!
Send IM::Send Email


Natolii ( ) posted Mon, 09 July 2007 at 7:48 AM

Outgoing mail, to my brother , my late father and my fiancee all on the same domain. Any reputable Poser Site including this one. The Massachusetts Department of Employment and Training. MYself at the Office. Daz3D specifically...

However, it does not explain how Gillbrooks is getting the same spam when s/he has a dedicated e-mail to handle only Renderosity.


gillbrooks ( ) posted Mon, 09 July 2007 at 7:54 AM

Quote - I'll repeat the crucial line here: Members systems are most likely infected with trojans generating spam. So what do you think you prove with above mentioned actions?
What guarantees do you have that the system used by the person you sent an email to is not generating spam (with a possible spoofed alias)!!!

 

In addition to my circumstances being the same as Natoli - I also NEVER EVER download any email to my computer before first checking in MailWasher - from there I delete all the crap and only then do I download my legitimate mail into OE.

I do not even download rendo mail other than the newsletter - I simply click on the ebot links in the preview pane.

This, once again, is nothing to do with us individuals being held responsible for our internet security, it is about email addresses used here at this site that are generating spam - be it from the route that the messages take leaving them vulnerable for the addresses to be harvested, or from other means as has been suggested by other members, that a member of staff here is selling them to mailing lists.

I don't CARE what the cause is but only that the cause is looked into properly and action is taken to prevent this from happening in the future.

As I have stated previously, this does not happen to my email addresses that I use for DAZ, Poser Pros, 3D Commune, RDNA etc - each having a dedicated address that I use for each site only.

Gill

       


gillbrooks ( ) posted Mon, 09 July 2007 at 7:56 AM

Quote - Outgoing mail, to my brother , my late father and my fiancee all on the same domain. Any reputable Poser Site including this one. The Massachusetts Department of Employment and Training. MYself at the Office. Daz3D specifically...

However, it does not explain how Gillbrooks is getting the same spam when s/he has a dedicated e-mail to handle only Renderosity.

 

Me is definitely a SHE - Gill being shortened from Gillian 😄

Gill

       


Natolii ( ) posted Mon, 09 July 2007 at 7:58 AM

And all my mail goes through AVG which auto-updates daily, plus I have Spybot, Ad-Aware and A Squared by EMSI.

Fro the sake of arguement through, I am going to give my Work machine a good scan with Asquared. It is protect by a spam filter by MX Logic, Mcafee (No choice there), Spybot and Ad-Aware. Plus we have a consulting firm for tech support.


TrekkieGrrrl ( ) posted Mon, 09 July 2007 at 8:26 AM

I think it's highly condescending of you, AndyWelder to first say that generally it's the user's fault because they have computers that are infected with trojans. Then when someone like Natolii comes along and tells you her computer is definitely not (and for the record: neither is mine, I take the same security precautions as she does with nightly scans against virus, adware and other nasties) ,THEN it's an odd coincidense, because right, YOUR computer isn't infected (so.. are you then saying she's not getting spammed since.. it apparently only happened to infected computers?!)

WHY is it that hard for anyone here at Rosity to admit that there may be faults in the glorious Bondware system? After all, admitting faults is the first step towards FIXING them. Or is Bondware the only faultless system in existance? In that case I'm impressed...

The members ARE getting spam that somehow originates from this place. I don't know how and frankly that's not my concern either. I just want it to stop.

FREEBIES! | My Gallery | My Store | My FB | Tumblr |
You just can't put the words "Poserites" and "happy" in the same sentence - didn't you know that? LaurieA
  Using Poser since 2002. Currently at Version 11.1 - Win 10.



Natolii ( ) posted Mon, 09 July 2007 at 8:50 AM · edited Mon, 09 July 2007 at 8:52 AM

PHP is known to have Security holes as well as Microsoft (How many updates have there been plugging said holes?)

I've been noticing an increase since the PHP upgrade went into play, that was about the time I also had to have my e-mail manually fixed by Debbie (OR Stacey I forget which) as I did not have access to the old e-mail address here.

Live test commenced at 9am EDT with the new address confirmation.


AndyWelder ( ) posted Mon, 09 July 2007 at 8:58 AM

Please, read what I write, not what you want to read.
I said that there are computers infected with trojans generating spam emails with spoofed 'send from' info to amongst others, Renderosity members. And that's a perfectly good explanation of what's going on, why you are receiving spam on and from Rendo accounts.
I didn't say it's your fault or it's your system doing that.  You are on the receiving end and sometimes it looks like you've sent spam to yourselves thanks to the 'spoofing'.
That's all.
To paraphrase you, TrekkieGrrrl: " WHY is it that hard for members to admit that there may be faults in the glorious members' system?"

This is the last I'll say on this subject. "Why write if you choose to read what's not written?"

AndyWelder

Groetjes uit Eindhoven!
Send IM::Send Email


Khai ( ) posted Mon, 09 July 2007 at 9:22 AM

Quote - Please, read what I write, not what you want to read.
I said that there are computers infected with trojans generating spam emails with spoofed 'send from' info to amongst others, Renderosity members. And that's a perfectly good explanation of what's going on, why you are receiving spam on and from Rendo accounts.
I didn't say it's your fault or it's your system doing that.  You are on the receiving end and sometimes it looks like you've sent spam to yourselves thanks to the 'spoofing'.
That's all.
To paraphrase you, TrekkieGrrrl: " WHY is it that hard for members to admit that there may be faults in the glorious members' system?"

This is the last I'll say on this subject. "Why write if you choose to read what's not written?"

and you are guilty of what YOU wrote. namely : Please, read what I write, not what you want to read.

go back and read what ppl have said then use you brain. you are telling them something different to what the problem actually is


thefixer ( ) posted Mon, 09 July 2007 at 9:29 AM

Hmm! I've been following this thread with interest because I started getting shed loads of spam a few Months ago, now I couldn't say with certainty when this started because a couple of things were happening at the time.
This palce was converting but also I was starting up my own web site that has a different e-mail to the one here, I naturally assumed the spam was coming from my own web site so with this thread in mind I've been checking whether the spam is coming from my web site e-mail address or the one I have here! Now from waht I've seen a good 90% of it comes through my e-mail that I use here, now I'm not saying it's rendo's fault, I don't know but it's curious!
That said I'm worth about as much as Bill Gates now according to all the money various dead peeps have left me that I never knew!!

Oh! and my system is clean as a shiny new pin, AVG 7.5 Pro AV updated daily, Windows firewall, Windows defender and I run an AV scan weekly and a spy scan Monthly!!

Injustice will be avenged.
Cofiwch Dryweryn.


StaceyG ( ) posted Mon, 09 July 2007 at 9:50 AM

We do care about this issue and have done a lot of tests and research to see if there is anything going on on our end. I set up myself 10 different email accounts on my test profiles here and not ONE of them received spam.. Not one. I didn't use those email accounts at all to send messages, I only receive newsletters, ebots, that kind of thing into them.  We changed some things on the newsletter mailing to see if that would have any effect, it didn't.  We are still researching.
I just wanted to let you all know that we have taken this seriously and I myself have communicated with quite a few members getting different information from them to pass on and we have done tests, etc.  
There are literally hundreds of ways for spammers to get what they need unfortunately.  I use my spam filters on my active accounts I use everyday (I have 7 different email accounts some completely unrelated to here as they are personal accounts and I get spam on all the accounts, used here or never here that  I use actively)

We are still doing some investigating so please try and understand that.


vikinglady ( ) posted Mon, 09 July 2007 at 10:06 AM

The part I think AndyWelder is talking about is:

  When an email started on this site is sent, it goes to someone that is infected. They respond, to the sender via their machine email and not this site's email subroutine. 
  I am paranoid about things like this, which is why I only use site mail here.



StaceyG ( ) posted Mon, 09 July 2007 at 10:10 AM · edited Mon, 09 July 2007 at 10:22 AM

I'm going to try and set up a spreadsheet to see if I can narrow down some similiarties between the members that are having this problem.

If you can answer the following questions and email them to me (stacey@bondware.com) that would be helpful

  1. What type of email address do you have? (exact email address)

 

  1. Do you use this email address just on Renderosity?

 

  1. How long have you had this email address set up?

 

  1. Do you (have you) sent anyone emails from the email address you use on Renderosity?

 

  1. Are you subscribed to the newsletter, coupons?

 

  1. Are you subscribed to any forums?

 

  1. Do you have notifications turned on to receive an ebot when one of your favorite artists upload an image?

 

  1. Do you send emails using Renderosity’s online email feature?

 

  1. Who is your ISP?

10.  Do you manage or host your own email or website that uses the same domain name?


gillbrooks ( ) posted Mon, 09 July 2007 at 10:46 AM

Stacey - just sent answers.

Gill

       


Victoria_Lee ( ) posted Mon, 09 July 2007 at 7:14 PM

Response sent, Stacey.

Hugz from Phoenix, USA

Victoria

Remember, sometimes the dragon wins. Correction: MOST times.


prodev ( ) posted Mon, 09 July 2007 at 7:57 PM · edited Mon, 09 July 2007 at 7:58 PM

Hi,

I need to clarify one point if I can....and maybe some confusion

The spam does not originate from Rosity in my case, but the address I set for mail seems to have been lifted and added to some list that is passed on to spammers.....and that it has happened several times.

Is there some way someone has got access to the email address database?

You have my answers.

As I stated in my email to you, I also am a professional IT Consultant. Spam is the scourge of the internet.

I'm happy to provide you with ANY information and assist in any way I can.


pearce ( ) posted Tue, 10 July 2007 at 9:05 AM

So who else apart from me doesn't get spam?  Rendo have had my current email address for a couple of years now, and I never get spam, from anywhere -- I feel quite abandoned.

That email address is one I use generally,  for online purchases, registering with other 3D sites, communicating with friends etc.  What am I doing right (besides using webmail exclusively, not using Outlook, and not using the Windows Address Book)?

I do have an old Hotmail address I use now only as a garbage address, which I once was careless about handing out all over, and it gets spammed constantly, though even then it's a dozen or so a week these days, not much more.


TerraDreamer ( ) posted Tue, 10 July 2007 at 9:29 AM · edited Tue, 10 July 2007 at 9:43 AM

I never get spam, either, at least to the address I use here.  The only place I get spam is on my five Yahoo accounts which I really don't care about; they're used for on-line purchasing and you KNOW many vendors sell addresses.  I hate Hotmail so I never use it.

As unpopular an opinion it is (Andy Welder's), it sounds like somebody's address book is being harvested, either a member's here, or a friend's.

@Acadia, et al:  As usual with several woe-is-me-rendo-sucks topics, you're way out of line.  You have no compelling or confirming proof whatsoever that Rendo is selling addresses or is the direct cause of spam received in your in-box either by Rendo mail server modification or by unauthorized internal selling of addresses.  Bashing, laying and throwing blame at Rendo will not solve the obviously not-working method you use to keep your personal e-mail account as spam free as possible.


gillbrooks ( ) posted Tue, 10 July 2007 at 9:37 AM

Quote - I never get spam, either, at least to the address I use here.  The only place I get spam is on my five Yahoo accounts which I really don't care about; they're used for on-line purchasing and you KNOW many vendors sell addresses.  I hate Hotmail so I never use it.

As unpopular an opinion it is (Andy Welder's), it sounds like somebody's address book is being harvested, either a member's here, or a friend's.

 

Interesting thought as my Renderosity email address is in no-one's address book other than Renderosity  :scared:

Gill

       


Acadia ( ) posted Tue, 10 July 2007 at 10:07 AM

Quote - Check out that attached thread, read my reply there and stop spreading "hearsay".
Rendo does care about this but members have their own responsibilities in avoiding spam.

Oh, and I'm not just another layman but a professional MCSE systems administrator so I know what I'm talking about.

I'm not spreading heresay when i say that the problem resulted when Renderosity made changes to their mail server in order to be able to accommodate larger mailings. I was told that by someone on the staff (I forget who), and unfortunately I am not able to search for that particular post because it's now in a forum inaccessible to me, otherwise I would provide you with a link.

"It is good to see ourselves as others see us. Try as we may, we are never
able to know ourselves fully as we are, especially the evil side of us.
This we can do only if we are not angry with our critics but will take in good
heart whatever they might have to say." - Ghandi



Acadia ( ) posted Tue, 10 July 2007 at 10:39 AM

Quote - @Acadia, et al:  As usual with several woe-is-me-rendo-sucks topics, you're way out of line.  You have no compelling or confirming proof whatsoever that Rendo is selling addresses or is the direct cause of spam received in your in-box either by Rendo mail server modification or by unauthorized internal selling of addresses.  Bashing, laying and throwing blame at Rendo will not solve the obviously not-working method you use to keep your personal e-mail account as spam free as possible.

By the way, I love how I was singled out with "et al". I didn't start this thread, I was the second to reply.    However, when I have used 2 long term email address (one about 6 years old and the other about 3 years old)  that have never been used on any website or received a single spam email in it until I used those email addresses here at Renderosity, and even to a brand new renderosity.com email address that I had when I was a co-ordinator and that I hadn't used anywhere else but here for renderosity business,  I would say that it's a pretty good chance that the spam is a result of having used it here.  Mail servers are only as secure as the company makes it.

I never said that Renderosity was the one spamming us. I said that it's a problem with their mail server since they did some tweak to increase mail volume sends, and that was told to me by Renderosity staff when I asked about why I was suddently getting spam emails to my then new renderosity.com address which I never used anywhere but here for renderosity business.

"It is good to see ourselves as others see us. Try as we may, we are never
able to know ourselves fully as we are, especially the evil side of us.
This we can do only if we are not angry with our critics but will take in good
heart whatever they might have to say." - Ghandi



prodev ( ) posted Tue, 10 July 2007 at 3:39 PM

Acadia, I started this thread, I completely agree with you.

The address I had set at rosity IS EXCLUSIVE....never used to send mail to anyone AT ALL, not posted to another website....anywhere AT ALL.

Might I suggest ....some rendo staff behind those avatars?

Anyway ........Sh*t slinging aside........

I believe there is an issue..... maybe some web bots crawing over the site or something...I don't know.

I know that it happens because I know I have not shared that address with anyone.
I know that it happens because if I change the address in my profile at some point I will start to receive spam to that address.
I know I dont have viruses/adware/trojans in my computer.
I have sent copies of the message headers to the Rendo admin.

Rendo staff.... Please don't question my honesty, integrity, and if I know what I'm doing !

I have spent thousands of NZ Dollars buying products from this site, and would like my concerns to be accepted with the same credibility as my Credit Card!


3Dillusions ( ) posted Tue, 10 July 2007 at 11:52 PM

I too opened a new address for Renderosity at Gmail lo and behold instant spam as this is the only place I use it was wondering how those Nigerian Scammers got it, as its only spam from those criminals I am getting

Angela


Natolii ( ) posted Thu, 12 July 2007 at 1:04 PM · edited Thu, 12 July 2007 at 1:07 PM

Testing day 3 has revealed results...

Spam is coming into the box that I set up specifically for Renderosity... Enhanced filters in place so that Spam is routing to a junk folder, though one has managed to slip through the filter.

I have 4 pieces within the last 24 hrs. No out going mail was sent from this e-mail and this is the ONLY site that uses the Address.

Stacey, I e-mailed you from my work address... Andy are you still going to tell me that there is no security hole?


Lord_syphex ( ) posted Thu, 12 July 2007 at 3:38 PM

I concurr.

 My Rosity email has only been used for this site as well. and I too have been getting spam and I do not display my email address. Unless of course Rosity is sending me viagra advertisments. LOL


3Dillusions ( ) posted Thu, 12 July 2007 at 10:03 PM

I agree my email address for gmail is only used on renderosity, and the Nigerian Scammers have it and are flooding my junk box to extintion lol.

WHile I am aware of their ways others may not and might fall victim to their money scams.  My other email address for gmail doent recieve spam and is not used for any graphics site but for personal emails, so this is how I know its from here.

Some how they have harvested all the email addresses, while for us its too late to get off their lists, for others is should be paramount that new members email address get protected.

And by the way this all started when the server was upgrade, before that I had no junk mail from anyone.


Lyne ( ) posted Thu, 12 July 2007 at 10:12 PM

Just a voice to this, and will not subscribe - I have enough trouble sorting out SPAM FROM HERE already... me too, changed my e mail address I use FOR THIS SITE ONLY 3 times and I get a TON of spam! I had to go back to a yahoo and only deal with this site's e mails "on line" so it's safer.. 

I already lost my "rosity notices" for comments on my own pics once, because my eyes were so crossed from selecting all the spam to push the yahoo spam button - I accidentially checked one of rendo gallery comment notices... and of course the SPAM KEEPS COMING - from all the same or similar addresses but BINGO - NO, NADA, NOT ONE notice from here for my gallery pic came - not even to my bulk! I had to make a special filter thing to get it going again.. .sheesh! 

There is a hole somewhere and no one seems to be able to find it... 

Don't get me wrong, I still love and use this site a lot and in fact spend most of my money HERE, but now I really have a list of "pet peeves" about this site... and sure hope it does not get worse with the 'face lift' thing coming! (already looking into FireFox now).

Lyne

Life Requires Assembly and we all know how THAT goes!


Natolii ( ) posted Fri, 13 July 2007 at 6:14 AM

Well, Andy?

You were quick to throw your MSCE in people's faces. Yet, there has been no word even though people here have dedicated boxes for Renderosity.

Now you have to consider the demographics in involved. I see Massachusetts (myself), Australia, Canada and England. These e-mails have to go through different servers. So if there is a zombie somewhere in the picture, it has to be close to Renderosity.

And the Spam did co-incide with the Newsletter release for me.


pjz99 ( ) posted Fri, 13 July 2007 at 10:31 AM

AndyWelder:

Quote - Check out that attached thread, read my reply there and stop spreading "hearsay".
Rendo does care about this but members have their own responsibilities in avoiding spam.

Oh, and I'm not just another layman but a professional MCSE systems administrator so I know what I'm talking about.

 

I've had an MCSE since NT 3.51.  Don't throw that around thinking it's all that impressive.  

Quote - Members systems are most likely infected with trojans generating spam.

Hogwash.  I have several email addresses.  Which one gets any spam at all?  The one I use here.

My Freebies


StaceyG ( ) posted Fri, 13 July 2007 at 10:45 AM

I posted a list of questions to send answers to a few posts back so we can do some comparing and see if we can pin this down. 
Please try and focus on getting me the responses and lets not lose sight of the end result we want to accomplish here.


LMDesign ( ) posted Fri, 13 July 2007 at 1:37 PM

I get spam since early April to email address used at Renderosity only. I made a complaint to Stacey 1st of May and have exchanged a few emails since then. I changed the email address used here very recently and spams started again the 3rd day after it was changed. It looks to me that somebody is harvesting all new emails and email changes thus members with very old emails perhaps escape? I have sent Stacey copies of headers of some of those spam emails and they come from many fictive addresses - not from Renderosity.

 

I use dedicated addresses for Daz and other 3D places also and do not get any spam for those. I have other generic addresses that I use when filling up forms on the Internet and those of course get plenty of stuff and I do not take such emails to Outlook directly. What is interesting also that spams coming to my Renderosity address are all 'Nigerian scam' type scams while what I get to other addresses are a mix of ads, scams, phishing, etc.  Since I am merchant here, I am annoyed that I can't take emails concerning my business any more to Outlook but have to 'clean' them first using other software.


tcombs ( ) posted Fri, 13 July 2007 at 2:21 PM

    The exact same thing has happened to me. I have exclusive email addresses set up for use on Renderostity, and another address designated for Daz, and the same for other sites. I have a total of 20 email addresses, all of which I scrutinize in Eprompter mail program before bringing into OE. Only the render address and an address I use for filling out forms, consistantly gets tanted with phishing and spam mail. Only the render address takes only days to get dirty, while a public address can take months to start getting spam.

    I have had 3 different email address at Renderosity, since this spam problem came up a few months ago, and just started getting spam to the last email address this week. I am going to change my address again this week.  That will be the fourth exclusive email to renderosity in that length of time! DAZ address has never gotten spam in the 4 years I've had it.

   Again, if the fault is with me, my pc, my domains, my OE or any other reason you can blame on me, why is this only happening to the address I use exclusively at renderosity...and to 3 exclusive email addresses!?

   My next step is to complain to https://rn.ftc.gov/pls/dod/wsolcq$.startup?Z_ORG_CODE=PU01 as a distributor of email lists.


Natolii ( ) posted Fri, 13 July 2007 at 8:57 PM

My next step will be to file an abuse complaint with my Domain provider and have their abuse department come talk to Rendo. I am not amused that I am getting Scam E-mail on an account I pay money for...

Stacey, Research is all well and good, but for months people have been saying there is a problem and have been pushed aside and/or treated as if it is their fault. I think Renderosity and Andy owes the membership a major apology.

Or do I have to invoice Rendo for my web account because of all the aggravation you are putting me and others through.


3Dillusions ( ) posted Fri, 13 July 2007 at 9:37 PM

Okay I am not a merchant but I buy alot , so before everyone gets nasty let all take step back.

First this only started after the new server upgrade, and yes its only via renderosity I am getting Nigerian Scams, while most of us are smart and savvy online lots of people dont not render, draw or have anything to do with graphics  apart from Looking at them.  They are  what I call the collectors. 

Somewhere there is a bot and this is a fact and its collectiong people email address.  One way admin can really check is simple, Open a new email address for renderosity and see how long it takes for this spam to arrive.

If it takes a couple of minutes this is a sure fire way to know that a BOT is on the server somewhere, remember these guys are master criminals operating not only out of nigeria but multi countries this is why most ISP's cannot do anything about them as they are based overseas not in the country the server is from.  They can afford to pay hackers big bucks to crack security and any server worldwide, theirs is a billion dollar business. If banks with highgrade security get cracked every day so can anyone else online its a FACT all your techs have to do is check, so this way members can remain safe in the future.

But the tech guys here can do something if they find the bot they can nuke it and upgrade security so its stops.  I believe there is software to sniff and alert techies to bots?

As I only use GMAIL for all my accounts and I did this on purpose so my dedicated paying email address would  be clean and it has been since its conception in 2000.

Angela


tcombs ( ) posted Fri, 13 July 2007 at 10:40 PM

Are our credit card numbers on render's record as safe as our email addresses?


3Dillusions ( ) posted Fri, 13 July 2007 at 11:09 PM

Were talking about Email address, credit cards are never stored online, its just not done.


Penguinisto ( ) posted Sat, 14 July 2007 at 12:56 AM

Attached Link: http://www.securityfocus.com

> Quote - I'll repeat the crucial line here: Members systems are most likely infected with trojans generating spam. So what do you think you prove with above mentioned actions? > What guarantees do you have that the system used by the person you sent an email to is not generating spam (with a possible spoofed alias)!!!

Ooookay... Andy: This is coming from a systems administrator (*nix, Linux, BSD, and I stopped bothering with the MCSE since Win2k because my CV is too damned cluttered as it is) who has to deal with lots of fun stuff of a very similar nature, but for a much larger corporation (and in a hybrid environment where things change all the time, but that's not important). In short, I'm not exactly the average user here. So please, keep any condescention and potential snobbery in check - at least for long enough to read this... First: Rendo uses PHP, hard. PHP has a nasty habit of leaking all over the place (speakin' of which, are you people allergic to Java or something? But I digress...) The list of vulns due to poor coding practices, buggy control sets, and the overall craptastic nature of PHP itself - let's just say that the exploits are legion. A site of this size using PHP is IMHO frightening. Fortunately, you don't get any email addys out of me that I don't already have filtered 900 ways from Sunday. My filters started seeing an increase roughly about the same time that others in here have been seeing problems, and a handful have actually managed to slip through before spamassassin's heuristics managed to adapt to it. Thing is, I don't use Windows. While I will never claim that any OS is safe, I find it highly interesting that your hypothesis -a "trojan"- would simultaneously infect Mac OSX and Windows (which I don't use, remember) --and-- Outlook Express (theirs) and Thunderbird (mine) in the same time frame. I'd almost get better odds at winning the jackpot on Powerball. Second: If you're serious about investigating this, hit up the link I pecked in up there, then go to the Vulnerabilities section in it's main menubar. Have your scripting crew comb over that mofo with a fine-toothed comb and check against their work, starting from the time frame in question and working your way back. Meanwhile, YOU need to make sure you've got all your patches in. I don't care if you say you do - double check (yes, I do the same thing when I think there's something amiss as well). Have a second pair of eyes look over both the list of patches and the PHP scripts. I realize with Bondware jammed into the works that this won't be easy, but I strongly suggest that you do this anyway. Third: MySQL... is it patched and current in there? Did you leave anything out? (understandable if a patch or two might break functionality, but you need to work with the scriptmonkeys on that, and they need to make the fixes needed). Fourth: I recall someone (Clint I think?) saying something about Oracle. Umm, you know the drill by now. Same as above. If it's RAC, remember about the STONITH/heartbeat util, else you get to eat some downtime. Finally: Rendo handles CC#'s and idenity info. You don't want to know the legal penalties and potential pitfalls of that info leaking out. Instead of hanging out here in the fora mouthing on about users and trojans, you and your cohorts need to be burning some midnight oil in investigating and fixing this... before it does something decidedly nastier than generate a list of spam targets. I'll stop at the 2-ruble mark... /P


Penguinisto ( ) posted Sat, 14 July 2007 at 1:00 AM

Quote - Now you have to consider the demographics in involved. I see Massachusetts (myself), Australia, Canada and England. These e-mails have to go through different servers. So if there is a zombie somewhere in the picture, it has to be close to Renderosity.

And the Spam did co-incide with the Newsletter release for me.

Add Oregon... Not sure if I still have my logs, but I can try to reconstruct them if anyone needs 'em. /P


shemia ( ) posted Sat, 14 July 2007 at 4:00 AM

I don't usually get into these types of discussions but I seem to be having spam issues as well. It has happened in the past usually with the email (private) that i use only on Renderosity. In the last week, as one poster stated, I'm probably worth as much as Bill Gates too as the amount of money I seem to have inherited is amazing...millions usually $50million a pop...and at approx 20 emails a day, I've either won (lottery) or inherited an astronomical amount. I decided to try something a couple of days ago and changed the email address I use on Renderosity to one that is a web based email. Haven't had one spam email since. Even on the web based email. I use Mail Washer as well, have Windows Vista Home Premium running Defender, Trend Micro PCCillin 2007 (continually updated) and have just installed Ad-Aware 2007, the newer version to Ad-Aware SE that I'd been using for over 2 years with constant updates as they became available. (this 2007 version came out on 6th July according the LavaSoft website), so I'm pretty heavily protected. I'm not angry just curious that whenever I change the email I use here to a web based server, I never get any spam on it or my private email address. I'm open to suggestions as to this anomaly. :o) Oh and my browser is Mozilla Firefox 2.0.


Privacy Notice

This site uses cookies to deliver the best experience. Our own cookies make user accounts and other features possible. Third-party cookies are used to display relevant ads and to analyze how Renderosity is used. By using our site, you acknowledge that you have read and understood our Terms of Service, including our Cookie Policy and our Privacy Policy.