1. Attachments are working again! Check out this thread for more details and to report any other bugs.

spammers w/embedded images like to http://www.infoocean.info/avatar2.jpg?

Discussion in 'PriusChat Website Questions' started by cwerdna, Apr 2, 2012.

  1. cwerdna

    cwerdna Senior Member

    Joined:
    Sep 4, 2005
    12,544
    2,123
    1
    Location:
    SF Bay Area, CA
    Vehicle:
    2006 Prius
    Right now user PriusChat Forums - View Profile: Gertrude73 (Gertrude73), assuming he/she hasn't been deleted has a whole bunch of posts (http://priuschat.com/forums/search/search-id/4099878/) when you search has an embedded "jpg" pointing to
    Code:
    http://www.infoocean.info/avatar2.jpg
    .
    If you Google for
    Code:
    http://www.infoocean.info/avatar2.jpg
    , you'll also see whole bunch of this crap on other message boards. Are these spammers or random people trying to harvest IP addresses for some reason? Does this "jpg" have something embedded intended to exploit some browser/image decoder's security hole? Anyone else have any insight/ideas?

    I've been noticing stuff like this going on recently on Priuschat, but am unsure if it's always been the above URL.
     
    #1 cwerdna, Apr 2, 2012
    1 person likes this.
  2. DavidA

    DavidA Prius owner since July 2009

    Joined:
    Jul 14, 2009
    2,325
    1,811
    18
    Location:
    Chicago western burbs
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Advanced
    We see crap like this every other day over at the vB forum I'm admin at. New users' 1st posts are scrutinized and that "Edit" button on the bottom right of each post (for mods and admin usage) comes in real handy when looking for hidden tracking codes and invisible tracking images they embed. Mostly, though, the new spammer game is all about SEO placements and not too dangerous for regular users. All the same, I don't want to click on those "images," just in case.
     
    #2 DavidA, Apr 3, 2012
    2 people like this.
  3. Chuck.

    Chuck. Former Honda Enzyte Driver

    Joined:
    Oct 24, 2006
    2,766
    1,510
    0
    Location:
    Lewisville, TX (Dallas area)
    Vehicle:
    2007 Prius
    Model:
    II
    As a moderator, I really scrutinize n00bs, and the vast majority of the time if it's a human spammer they must have no idea how easy it is to nail them on IP, email, clueless profile, trail of spamming other sites that week... You can tell me getting one sale out of a million makes it worthwhile, but I still think most spammers are stupid when it comes to business sense.
     
    #3 Chuck., Apr 3, 2012
  4. cwerdna

    cwerdna Senior Member

    Joined:
    Sep 4, 2005
    12,544
    2,123
    1
    Location:
    SF Bay Area, CA
    Vehicle:
    2006 Prius
    #4 cwerdna, Apr 7, 2012
  5. TonyPSchaefer

    TonyPSchaefer Your Friendly Moderator
    Staff Member

    Joined:
    May 11, 2004
    14,816
    2,496
    66
    Location:
    Far-North Chicagoland
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Advanced
    Thanks for the heads up. That account's banned now.
     
    #5 TonyPSchaefer, Apr 7, 2012
  6. Paradox

    Paradox Prius Enthusiast / Moderator
    Staff Member

    Joined:
    Sep 22, 2005
    29,110
    8,589
    201
    Location:
    USA
    Vehicle:
    2014 Prius v wagon
    Model:
    Five
    I banned it along with all the other infoocean ones I see/get reported.

    Since we, the mods, can't catch everything it's crucial people report things like this when they see it. Thanks all.
     
    #6 Paradox, Apr 7, 2012
  7. F8L

    F8L Protecting Habitat & AG Lands

    Joined:
    Aug 14, 2006
    19,011
    4,080
    50
    Location:
    Grass Valley, CA.
    Vehicle:
    Other Non-Hybrid
    Model:
    N/A
    I report like a mofo! Then i realized Tony is a moderator. No wonder he never got banned. LOL
     
    #7 F8L, Apr 7, 2012
  8. timtim2008

    timtim2008 Member

    Joined:
    Jun 13, 2009
    204
    22
    0
    Location:
    Alpharetta, GA
    Vehicle:
    2004 Prius
    Model:
    N/A
    i mod a few other vb sites. we see it all the time too.. just [x] delete and move on.
     
    #8 timtim2008, Apr 8, 2012
(You must log in or sign up to post here.)