MSN/WLM users beware ..... again

[MysteryFCM]

We've had a few reports of the (now familiar) style of site that asks you to enter your MSN Messenger details in return for being informed who "has you blocked". The site in question is called

msnliststatus.com

Not only is it a bad idea to simply fill in ANY login details on a random website you happen to come across, I don't think I've ever seen a single website offering this "service" actually carry it out successfully.

On the bright side, the site does offer you some terms of service to look at before you sign up:

http://blog.spywareguide.com/2008/02/a_ ... _your.html

[Noyb]

Uh-oh...I use WLM; I'd better be careful. Thanks, MysteryFCM.

[abfan123]

Thanks for the warning, But I can't seem to understand why to make it sticky.
Who would use a service like this? I don't care if someone will block me.

[MysteryFCM]

It's stickied due to the amount of people that usually fall for this type of thing

[abfan123]

"Your messenger contacts will receive an advertising message from you when you use this service.
"
Hmm
So it'll be like one-time advertising instant message?
I first thought that they'll send some spam by email...

[Noyb]

It's stickied due to the amount of people that usually fall for this type of thing

And I know plenty of people who would probably fall for this scam.

[MysteryFCM]

So it'll be like one-time advertising instant message?
I first thought that they'll send some spam by email...

Definately not just a "one time deal" ....... read the article I wrote on a similar scam;

Decoding the spam: Social networking scams
http://mysteryfcm.co.uk/?mode=Articles&date=06-11-2007

... and;

sms.ac turns into fanbox
http://spamhuntress.com/2007/12/15/smsa ... to-fanbox/

.... and an article I wrote in 2005;

sms.ac?... just say no!
http://mysteryfcm.co.uk/?mode=News&date=22-07-2005

[addonsfan]

It's stickied due to the amount of people that usually fall for this type of thing

Even though this has nothing to do with Avant Browser, or the General Discussion rules? :\

[MysteryFCM]

Are you doing this deliberately? GD is for just that, GENERAL discussion - it doesn't need to be Avant related.

[addonsfan]

Just had a buddy send me a message while he was offline. (I know it's possible with "appear offline")
Here's a screenshot: (information bar is removed with a patch)

The site he sends me to is "lilsk8rberto.imageh0sting.info". Which cleverly adds the beginning of his email to the URL, as a subdomain.

The site it goes to is an MSN login field, with lots of MySQL errors.

Warning: mysql_pconnect() [function.mysql-pconnect]: Can't connect to MySQL server on '127.0.0.1' (111) in /home/www/indexx.php on line 7

Warning: mysql_select_db() [function.mysql-select-db]: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (111) in /home/www/indexx.php on line 8

Warning: mysql_select_db() [function.mysql-select-db]: A link to the server could not be established in /home/www/indexx.php on line 8

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/www/indexx.php on line 51

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/www/indexx.php on line 52

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/www/indexx.php on line 56

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/www/indexx.php on line 57

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/www/indexx.php on line 66

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/www/indexx.php on line 71

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/www/indexx.php on line 77

If it's not obvious to you what this means, it means that this site is using MySQL, and is logging your username/passwords. Typing your email/pass will always fail to log you in, instead it's secretly saving your info, but will never give you any real type of service.

It admits it in the "terms or service". People, do not fall for these sites.

[WindRune]

OMG! If my memory serves me correctly, a friend who was offline sends almost if not the exact message to me on MSN last year. There were also times wherein the script was in weird format.