Email sent today stating your account will be upgraded is not from us

I got two phishing emails from <photo@sudjam.com> and from <info@vallasvuo.fi>

 

No warning mail from Photo.Net...

Was a waning email actually sent out?

How is it that I have not received it?

I received the email too. I could not find how to "opt out" and had forgotten about this account. I would like to opt out now, can you help me do that please?

I just received a 2nd email that has only this wording.........

 

This email was infected with a virus: 'Virus/JS/Downloader'.

The content of this message has been removed for your protection.

 

I had to find an old hdd to discover when it was that I joined photo.net. It was Nov. 26, 2007. For whatever reason, I've had no activity on the forum. I may have been looking for some Nikon help on a D3. My email address was active but I had no record of the password. No mention in any of 3 password books! I quickly had it reset.

I got the email. Both of the links in it point to "PhotoNet_Membeship_Premium_Info_Html.zip" which contains some obfuscated JavaScript. It really just looks like an amateurish attempt to get people to click on those links and run the scripts. Deceptive, crummy, and probably criminal, but also petty, inept, unambitious, and not necessarily very dangerous.

 

A properly set up password system doesn't store the actual passwords at all. There's little or no reason to think anyone's password has been compromised. What's apparently been accessed is the info in your profile. Your email address matched up with your name and whatever else you've got in there.

 

The greatest danger would come if 1) you've got a common or weak password here on photo.net that could be reverse-hashed and 2) you use that same password someplace else, someplace important, someplace guessable from your profile info. Even in that case, the danger isn't here, the danger is at that other site. For example, if you use the same password at photo.net and Facebook, and your Facebook is conveniently linked from your profile, the important danger is to your Facebook account, and it's your Facebook password you most need to change.

 

The staff at photo.net should figure out how this happened and try to prevent it from happening again, sure. But with so many websites in the world, breaches like this are inevitable. It's a rotten situation, but it's almost always a waste of energy to get into high dudgeon at any one little site operator. Most of them are doing the best they can with the resources they have, and all of them are only human. These kinds of breaches have been happening for years, they will continue to happen in the future. Use a different password on every site, don't put excessive detail in your profile.

I haven't received one yet. Frontier Yahoo mail is pretty good at snagging spam, and I may have deleted it without looking. Or, should I just feel left out? :(

I did not get any 'phishing' or 'renewal' emails but did get the warning from photo.net - which I guess is good.

 

There is no doubt in my mind, however, that p.n was hacked in some manner and at least some email addresses were compromised because recently the number of other 'spam' emails I receive have increased at least ten-fold, and only at my email address associated with this site. It would be a 'serendipitous' coincidence if those events were not related. :(

 

I now retire back into the shadows until something else occurs to induce me log in again to find out what's happening - or until something approximating the functionality and usability of 'photo.net V1' is restored.

I got two phishing emails from <photo@sudjam.com> and from <info@vallasvuo.fi>

 

No warning mail from Photo.Net...

 

we sent one to all - not sure why you didn't get it but it was sent

Is it possible, now that the feathers have settled, we could get away from the 'I got one too !' posts ? Those who got one, got one - those who didn't, didn't. End of.

As long as PN hasn't set up another way of registering who received one and who didn't, it might be useful for many of us to report. I didn't receive the original phishing email, but did get the warning email from photo.net. I am not a paid subscriber.

we sent one to all - not sure why you didn't get it but it was sent

I've still not received anything from photo.net (except the phishing emails). Checked spam folders, etc. Whatever you did that supposedly went to all apparently didn't work. Whatever the phishing folks did apparently did work. BTW, not a complaint, just info point.

No email received here from photo.net.

No alert e mail received here. Ditto. Got at least one phish. Edited September 23, 2017 by GerrySiegel

I did receive the alert email, but had to go looking for it in a spam folder. For this and similar sites, I use a contact email address hosted at Yahoo - specifically to keep it at arm's length from all of my "real" email addresses. Yahoo considered PN's legitimate alert message to be spam, and that's where it put it. I've told Yahoo it's NOT spam, but of course the alert message itself is formatted in such a way that it's just about guaranteed to trigger spam filters when scanned. So it's a fair bet that many people reporting no receipt of that message just haven't looked in their spam folders.

So it's a fair bet that many people reporting no receipt of that message just haven't looked in their spam folders.

 

Yeah, no. If the scammers have figured out how to make their message deliverable and the photo.net admins have not, there are bigger problems than just looking in your spam folder. For the record, I've looked in my spam folder and mail logs and haven't seen anything from photo.net.

Checked my spam folder as well...no email from photo.net.

I'm afraid I clicked on one of the fake email links. What should I do now?

I'm afraid I clicked on one of the fake email links. What should I do now?

Don't open the attachment - delete it and the e-mail.

This site was hacked into to get user info, now the email I use very rarely is receiving 2-3 spam emails a day because my email was sold to spammers. I received the spoof email that my account was upgraded to premium, and no I did not click on anything in that email, but someone got my email from here and distributed it widely.

 

I have asked for my account to be removed or deleted and got no response. There is no option to remove myself. Oh boy I get to change my user name and add a fake email, big deal. So I imagine the administrators will remove this post and stay in denial and not help me. Good sites like this are not worth the bother if emails are hacked. Thanks for no recourse dudes.

Edited September 23, 2017 by no longer a member

Oh boy I get to change my user name and add a fake email, big deal

don’t mock it. i’ve tried changing my username, buddy icon and email address and the system won’t let me. i feel so vulnerable.

this is what my username and buddy icon should be.

 

 

how do you think i feel, every time i post, being portrayed as a someone with a question mark tattooed on his forehead? who are scammers more likely to scam? i feel SO vulnerable

 

and another thing. when I search for Norman in the list of members, i’m taken to norman’s page. lower fricking case noman. how bad is that?

Edited September 23, 2017 by Norman 202

Add me to the list of people who have received no email warning. I've check spam folders also... nothing.

No spam for me. No email warnings from Photo. net either. I'm forgotten...

No spam for me. No email warnings from Photo. net either. I'm forgotten...

Very sad that a fellow Peri wasn't spammed!

Very sad that a fellow Peri wasn't spammed!

 

HA ha ha ha ha... By the way, did or do you live in New Orleans? I have a cousin, John Peri, that I haven't seen in decades.