site Search:


 
   
story category
(Don't) Open Your Online Greeting Card
It's not from your neighbor or family member
by KathrynV Sunday 22-Jul-2007 tags: spam
Tipped by Romney2012 See Profile
Hopefully you haven’t been tricked into opening any of the spam email cards that have been flooding people’s inboxes this month. But you wouldn't be the first; Postini has reported that their normal 700,000 daily viral emails has increased to 35 million per day and that they’ve seen nearly 300 million of the greeting card email virus since the month began. The links to the cards conceal a virus which require you to scan and clean the hard drive for removal if your computer gets infected. C’mon, wouldn’t you know if Mom was suddenly sending you an e-card?

view: topics flat text 
Post a:
page: 1 · 2

stltech

join:2002-01-27
Florissant, MO

Hate this!

been getting these for a while now..........

found this to help slow them down - »news.office-watch.com/t/n.aspx?a···zoneid=4
--
are we having fun yet?

HD_Ride
Premium
join:2000-10-18
Trenton, NJ
Reviews:
·VoicePulse

Re: Hate this!

said by stltech:

been getting these for a while now..........

found this to help slow them down - »news.office-watch.com/t/n.aspx?a···zoneid=4
Thanks for the link, I will add the new rules so I could even pickup more

Lil Jon
Premium
join:2006-06-26
Cincinnati, OH

Re: Hate this!

said by HD_Ride:

said by stltech:

been getting these for a while now..........

found this to help slow them down - »news.office-watch.com/t/n.aspx?a···zoneid=4
Thanks for the link, I will add the new rules so I could even pickup more
co-sign

duh

@qwest.net

approval from:
jaykaykay See Profile

well, gosh, if ya don't know who it's from, do you know where the delete button is or do you just let anyone into your home that knocks on your door...lol

Oleg
Bellsouth Fastaccess
Premium
join:2003-12-08
Birmingham, AL
I am getting 2 or 3 everyday and I send them into trash.

PolarBear03
The bear formerly known as aaron8301
Premium
join:2005-01-03

Re: Hate this!

I have Gmail. I don't get them at all.

cork1958
Cork
Premium
join:2000-02-26

Re: Hate this!

said by PolarBear03:

I have Gmail. I don't get them at all.
Gmail sucks, even if I'm not getting any of these there. I am getting them in my Yahoo and (junk)excite.com mail though.

HD_Ride
Premium
join:2000-10-18
Trenton, NJ

RE: (Don't) Open Your Online Greeting Card

Yep, I’ve been getting hammered with those too. the filer has been doing a good job but a few do get though but so I have to manually delete them

coastjam
Premium
join:2001-03-05
Atascadero, CA

Re: RE: (Don't) Open Your Online Greeting Card

Yeah I have seen a bunch of these also on Charter's network.
--
AH-1W SuperCobra its a Hellfire of a ride...

paintref
TrainPlane Simulation Addict

join:2003-02-21
Houston, TX

Thank god for gmail's spam filters..

I have been getting these too in my gmail account...thank god, the spam filter picks it up and sends it to the spam box.

Rob
In Deo speramus, God Bless the USA
Premium
join:2001-08-25
Kendall, FL
kudos:2

(#*$ .. I thought I had many friends..

.. So all these greeting cards weren't real? And here I was thinking that I really did have 200 new friends each day. Damn it.

PolarBear03
The bear formerly known as aaron8301
Premium
join:2005-01-03

Re: (#*$ .. I thought I had many friends..

Sorry to burst your bubble, buddy.

Rob
In Deo speramus, God Bless the USA
Premium
join:2001-08-25
Kendall, FL
kudos:2

Re: (#*$ .. I thought I had many friends..

said by PolarBear03:

Sorry to burst your bubble, buddy.
I feel like a naive teen girl at a club. I ended up with no friends and infected with a virus.
--
YourIP.US - It's Your IP .. and more!
rr.cx - Personal Site.. coming soon.

PolarBear03
The bear formerly known as aaron8301
Premium
join:2005-01-03

Re: (#*$ .. I thought I had many friends..

LMAO!

nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
kudos:7
Reviews:
·AT&T U-Verse

First reported June 17th

See these threads
»"Greeting card" spams from kasolid.hk
»... sent you a .....hk greeting!
--
AT&T dsl; Westell 2200 modem/router; SuSE 10.1; firefox 2.0.0.4

Titus Pullo
I came, I saw, I slept

join:2004-06-26
kudos:1

Same people open these

that you see with Tatyana, Svetlana, Barbie, Lola, Gabriel, etc., listed as ' Friends' on their MySpace profile.
Poor stupid bastards . . .
--
Emiya

join:2006-03-30
Southington, OH

I don't even open REAL ecards.

I don't open this kinda crap even when it's from legitimate people I know. I assume they're just trying to install spyware anyway.
bgraham

join:2001-03-15
Smithtown, NY
Reviews:
·Verizon VoiceWing
·Verizon FiOS
·VOIPo

I get 20 a day also

I have no idea how my email address ended up on this spammers list either. I did use my real email address to register my own domain name, but never received any spam of consequence until about a month ago.

I open all emails as text only and have already set rules for deleting Viagra, loan request and swiss watches etc and now I have added the greeting and ecards so I only see a few.

My wifes' email address is the same domain name as my own and she never gets the greeting cards, ecards spam so I can only think that they got my email from a Whois search.

hawk82

join:2001-04-26
Oakland, ME
Reviews:
·Verizon Online DSL

Been working on taking down those sites

I've been getting a lot of those recently. Usually I spend the couple of minutes to find out if the website is still online, then I'll find the IP address of the website, then the abuse contact person of the IP address, and then shoot off an e-mail to that person, in the hopes they'll take the IP address offline. Whether it works or not, I don't know. I delete the e-mail after I've forwarded it to the abuse contact person.
--
hawk82[at]nailbat[dot]com
IT Consultant
Yes, I use pico... laugh all you want....

Defiance82
Computer Elite
Premium
join:2002-09-11
Burlington, WI

Re: Been working on taking down those sites

I've been getting these for a while myself also. They just started few weeks ago.. I was like WTF! More spam!
--
Programming is like sex. One mistake - endless support.
steelaw
The Saga Continues From Optimumoncap
Premium
join:2004-07-23
Bronx, NY

Re: Been working on taking down those sites

yes i get them to i just label them as spam

dslwanter
It's coming
Premium
join:2002-12-16
Niles, OH
Reviews:
·AT&T Midwest

I get these

About 10 or so per day. It varies from a family member to a former class mate. Really stupid and it looked suspicious from the get go.
--
"You're as worthless as a screen door on a submarine!" Check out my Internet Radio Station & DJ Service, »www.thebomb102.com.
minkathebest

join:2003-09-10
Sacramento, CA
Reviews:
·Comcast
·AT&T DSL Service

Here is one

In case anyone is curious, and searches, here is the email:
Hi. School friend has sent you a greeting card.
See your card as often as you wish during the next 15 days.
 
SEEING YOUR CARD
 
If your email software creates links to Web pages, click on your
card's direct www address below while you are connected to the Internet:
 
http://xxx
 
Or copy and paste it into your browser's "Location" box (where Internet
addresses go).
 
We hope you enjoy your awesome card.
 
Wishing you the best,
Postmaster,
Postcard.com 
 

shaner
Premium
join:2000-10-04
Calgary, AB

Re: Here is one

said by minkathebest:

In case anyone is curious, and searches, here is the email:
Hi. School friend has sent you a greeting card.
See your card as often as you wish during the next 15 days.
 
SEEING YOUR CARD
 
If your email software creates links to Web pages, click on your
card's direct www address below while you are connected to the Internet:
 
http://xxx
 
Or copy and paste it into your browser's "Location" box (where Internet
addresses go).
 
We hope you enjoy your awesome card.
 
Wishing you the best,
Postmaster,
Postcard.com 
 
Wow. That is brutally obvious it's not legit.

--
Click this and read. -> »www.actsofgord.com/
»Canadian Wireless FAQ
I'm laying pipe,
all night long,
laying pipe,
to satisfy that woman.
- David Wilcox

DrModem
Premium
join:2006-10-19
USA
kudos:1

been getting tons of these

i have 5 email addresses and ive been getting at least 5 a day of these per each inbox.
XknightHawkX

join:2003-02-13
East Peoria, IL

greeting card from you neighbor?

I really like the subject that my neighbor has sent me an e-greetings. Funny though. I don't know my neighbors much and they definantly don't know any of my email address. I don't open 99.9 percent of the email I get anymore. I delete anything and everything pretty much anymore. The world needs a law against spam. And a slap on the wrist doesn't cut it. The spammer should be jailed for no less then a year and fined a lot of money. The person or people that are paying the spammers should get fined big time. Even jail time if they knew that the person they hired was sending unsolicited mail.

Sarah
Premium,ExMod 2002-05
join:2001-01-09
Cambridge, MA
kudos:5

Re: greeting card from you neighbor?

My favorite was the one I got that I have a greeting card from "a worshipper." I'm pretty sure I don't have any of those
kpatz
MY HEAD A SPLODE
Premium
join:2003-06-13
Manchester, NH

1 edit

Re: greeting card from you neighbor?

I get a kick of the Worshipper ones too...

Let's see how many I've captured...

quote:
kpatz@zuul:~$ egrep '^Subject:' mail/stormspam
Subject: You've received a postcard from a family member!
Subject: You've received a postcard from a family member!
Subject: You've received an ecard from a partner!
Subject: You've received a greeting postcard from a school mate!
Subject: You've received a greeting postcard from a school mate!
Subject: Happy 4th of July
Subject: God Bless America
Subject: Celebrate Your Nation
Subject: Your Nations Birthday
Subject: You've received a greeting card from a Neighbour!
Subject: You've received a greeting card from a Class-mate!
Subject: You've received a postcard from a School friend!
Subject: You've received a postcard from a Neighbour!
Subject: You've received a greeting card from a Neighbour!
Subject: You've received an ecard from a School friend!
Subject: You've received a greeting ecard from a Family member!
Subject: You've received a greeting ecard from a Colleague!
Subject: You've received a greeting ecard from a School-mate!
Subject: You've received an ecard from a Neighbour!
Subject: You've received a greeting ecard from a Neighbor!
And I shouldn't leave out my wifey's address either:

quote:
heather@zuul:~$ egrep '^Subject:' mail/stormspam
Subject: We have more Paris Hilton stories.
Subject: You've received a postcard from a family member!
Subject: You've received a postcard from a family member!
Subject: You've received a postcard from a family member!
Subject: You've received a postcard from a family member!
Subject: You've received a greeting card from a family member!
Subject: July 4th B-B-Q Party
Subject: Independence Day Celebration
Subject: July 4th Fireworks Show
Subject: You've received an ecard from a School friend!
Subject: You've received a greeting card from a School friend!
Subject: You've received a greeting card from a School mate!
Subject: You've received a greeting ecard from a School mate!
Subject: You've received a greeting card from a Partner!
Subject: You've received a postcard from a School-mate!
Subject: You've received a greeting card from a Colleague!
Subject: You've received a greeting ecard from a Neighbour!
Subject: You've received a greeting ecard from a Colleague!
Subject: You've received a greeting card from a Friend!
Subject: You've received a greeting ecard from a School mate!
Subject: You've received a greeting ecard from a Neighbour!
Subject: You've received a postcard from a Worshipper!
Subject: You've received a greeting card from a Friend!
Subject: You've received a greeting ecard from a Neighbour!
Subject: You've received a greeting ecard from a Friend!
Subject: You've received an ecard from a Class-mate!
Subject: You've received an ecard from a Family member!
Subject: You've received a greeting ecard from a Class mate!
Subject: You've received a greeting ecard from a Neighbour!
As you can see, there were a handful early on that weren't using the greeting card theme... also, for the first week or so, they were using mainly .hk domains for the websites, then they switched to IP address URLs.
--
Windows Vista has detected that your mouse was moved. In order to enhance your user experience, Vista needs to contact Microsoft to re-activate the software. Please make sure you are connected to the Internet, have your credit card handy, then click OK.

roc5955
Premium
join:2005-11-26
Rosendale, NY
said by Sarah:

My favorite was the one I got that I have a greeting card from "a worshipper." I'm pretty sure I don't have any of those
Yeah, many from here can tell, that if *I* had ANY worshipers, their mental capacity would be severely in question. Yet the cards from "worshipers" still come in... Maybe they mean whore shippers?
--
"Understanding is a three-edged sword."

PCInTech
keeping art alive since 1953
Premium
join:2004-06-07
Massena, NY
kudos:9

Cruel trick

Curiously, I started getting these on my BIRTHDAY! So, naturally, I assumed they were for real. All was good, as soon as I tried to open the first one, Avast went nuts and stopped me from doing anything. I deleted the rest.

jaykaykay
4 Ever Young
Premium,MVM
join:2000-04-13
Scottsdale, AZ
kudos:19
Reviews:
·Speakeasy

Re: Cruel trick

I got a few several days after our anniversary and at first thought that they were from freinds. Fortunately, I checked with the friends and found out they hadn't sent anything so did what I usually do, added the address, for all the good it does, to my blocked mail and deleted them.

biff420
Premium
join:2002-01-26
Berkeley, CA
Reviews:
·AT&T Yahoo
The cruelest trick now is they're using
From: Bluemountain.com, 123greetings.com, which
are legitimate e-card sites.

The stupid thing is using IP addys in referral url.
"" Hi. School mate has sent you a postcard.
See your card as often as you wish during the next 15 days.

SEEING YOUR CARD

If your email software creates links to Web pages, click on your
card's direct www address below while you are connected to the
Internet:

»xx.xxx.41.40/?5e8517a32e6b9ea6878b

Or copy and paste it into your browser's "Location" box (where Internet

addresses go).

We hope you enjoy your awesome card.

Wishing you the best,
Postmaster,
greetingCard.Org ""

Yeah, right....

I like the idea of parsing the IP addresses and
forwarding them on to the appropriate abuse dept.

stomp357

join:2003-04-13
Lake Charles, LA

1 edit

I never open any of these.

Ever since E-cards have came about, I never open them. If someone wants to send me a greeting card, they can do it by snail mail.
kpatz
MY HEAD A SPLODE
Premium
join:2003-06-13
Manchester, NH

Easy to filter using procmail or whatever...

Just set up a filter to block incoming email that has an IP address URL. Problem solved.

I have procmail filters posted in the security forum.

roc5955
Premium
join:2005-11-26
Rosendale, NY

Online "greeting card" scam

Geeze,
I must get at least fifty of these a day, between all my webmail, and POP3 email accounts. It's getting a bit crazy with this. And at work, no matter how many times we tell users not to open attachments, or links that they cannot confirm, they keep on opening them. I had on programmer last week that opened one, and, sure enough, it was a virus or trojan or something, and she shut off her AV auto updates, because, "it takes so long for my PC to startup." I told her that that's what happens when you don't do it, as I reformatted her PC and reinstalled everything.
--
"Understanding is a three-edged sword."

Johnny
Premium
join:2001-06-27
Atlanta, GA
kudos:1

No problem here

Those emails contain .exe attachments - Windows executables.

Doesn't bother my OS X at all...

I open them and let them try to execute. Since they can't find their beloved Windows APIs, they don't execute.

Of course, OS X puts up a dialog telling me that the email message contains an executable and asks for me to OK it.

No virus checking needed.

dvd536
as Mr. Pink as they come
Premium
join:2001-04-27
Phoenix, AZ
kudos:4

GEEZ

People are STILL falling for these?

MysticGogeta
The Robot Devil
Premium
join:2005-03-14
League City, TX

Don't get them

I don't get them at all and if I did I wouldn't open something from someone I don't know.
--
Team Discovery-Join the fight
robertfl
Premium
join:2005-10-10
Mary Esther, FL

Re: Don't get them

Is this a virus or worm it installs on your PC? I read some stuff but couldn't make sense out of it.

-Rob

MysticGogeta
The Robot Devil
Premium
join:2005-03-14
League City, TX

Re: Don't get them

I think its a worm and it gets into your contact list and sends them to everyone else. I've never gotten one of these in either of my email accounts.
--
Team Discovery-Join the fight

evilghost
Premium
join:2003-11-22
Springville, AL

Re: Don't get them

ecard.exe is a download/loader that installs a P2P (E-Donkey) controlled rootkit (vdo.sys). The purpose of the "virus" is to build another bot-army. This e-card crap is just more fun from your friendly Russian/Romanian bot-herders.

Monday, 04-Jun 16:43:00 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.