I've got a problem ??
-
This is just a new kind of spambot, copying content from old forum threads ( https://forum.netgate.com/topic/130894/error-listen-queue-overflow in this case ) and reddit, to add malicious links. I've already reported it to the mods.
-
Nice catch @Grimson do you have any links to info on how these new sorts of spambots are working..
Did it fail? Not seeing any links posted, or was the link removed? There is a lot of profiles being added many spam ones for sure that I have reported and discussed with some of the mods. But there are many many more that are just profiles with nothing on them, no posts, etc. I don't see why so many people would create a profile and then never post.. Is there content hidden unless you have a profile?
-
@johnpoz said in I've got a problem ??:
Nice catch @Grimson do you have any links to info on how these new sorts of spambots are working..
No links, I just noticed them cropping up on different forums.
@johnpoz said in I've got a problem ??:
Did it fail? Not seeing any links posted, or was the link removed?
Have a closer look at the "Ufabet" at the end of the post, though I wouldn't follow that link.
@johnpoz said in I've got a problem ??:
Is there content hidden unless you have a profile?
Not as far as I know.
-
ufabet? Hmmm not seeing any sort of links... Im at work.. Let me check direct via no proxy, etc. some image not showing up maybe?
Yeah not seeing anything that links to anything no images.. etc.. I even turned off adblocker.. wonder if my pihole is blocking dns query to image or something... Can you post a screenshot of what your seeing about this ufabet?
Hmmm wonder if its hosted here "mobile.pipe.aria.microsoft.com" pihole that from my client viewing the page from.. Is only thing see blocked at all..
-
It's a text link in a white font, switch to a dark theme and you should see it.
So likely more targeted at search engines to get a higher link rating. -
@lukingz33 said in I've got a problem ??:
Ufabet
Wow -- yeah would of never caught that.. But if I highlight it, it is there and a link.. So yeah really great catch
-
Do'eth!!
-
Yep- To anyone reading.. Don't justify them by clicking this their links..
https://www.google.com/search?source=hp&ei=bfhqW7ntAaGS0gKOiKTwAw&q=http%3A%2F%2Fwww.ufa189.com%2Fufabet&oq=http%3A%2F%2Fwww.ufa189.com%2Fufabet&gs_l=psy-ab.12...1768.1768.0.6829.1.1.0.0.0.0.83.83.1.1.0....0...1.2.64.psy-ab..0.0.0....0.p66x47EULOM
-
I'll nuke this thread momentarily but we have also seen these being sneaky by making a post and then a few hours later they go back and edit the post to add links. It didn't happen here, but I caught half a dozen or so instances of this yesterday and some even had replies since they initially looked legit. If you see the little pencil icon by the timestamp you can click it and see previous post revisions and the first one had no links, second one did.
They're getting fairly sophisticated. I'm guessing this new technique is a way to bypass spam checks on new posts that may not inspect edits.
Also a bunch of profile spam, but hopefully I have now cut down on that by requiring at least 5 reputation to fill in the "about" and "website" section of the profiles as well as to add a signature. I wish we could lock down post editing in a similar way but there isn't an option for that yet that I've found.
-
Another spammer just hit this thread ;)
We should just prob ban the IN and PK... seems all that comes out of there is junk.
And we should prob just remove ALL of the accounts with zero posts to be honest. There is zero reason to have an account i your not going to post. There is no content here that requires you log in to see.. I have been watching the users as they get created... Lot of them are sneaky and just wan their whatever info listed.. And they don't even post anything. While signature and stuff helps... Just the username is used to try and up their google hits, etc.
