TheSamba.com :: View topic - Fake emails from TheSamba.com / Fake Samba login pages

Mon Aug 13, 2007 11:48 pm

Update January 5, 2015:
Please read this message regarding emails with a link that goes to a fake Samba login page on another web site
Update #2 - September, 2015 / May, 2016:
Fake PM (Private Message) notification sent to users

Sample of #2
This is a FAKE WEB SITE trying to steal your login info, notice the address bar is NOT from thesamba.com):

Fake Private Message (PM) notification that linked to the above web site
Quote: From: "TheSamba.com" <[email protected]>
Subject: New private message has arrived
Date: May 6, 2016 at 7:32:08 AM PDT
To: <user's email - removed>
Reply-To: "TheSamba.com" <[email protected]>

Hello <username of member - removed>,

You have received a new private message to your account on "TheSamba.com" and you have requested that you be notified on this event. You can view your new message by clicking on the following link:

http://www.thesamba.com/vw/forum/privmsg.php?folder=inbox

Remember that you can always choose not to be notified of new messages by changing the appropriate setting in your control panel.
--
Thanks for visiting the site,
Everett Barnes
http://www.thesamba.com
The bolded link above does NOT to to thesamba.com - you can usually see this if you hover over the link in your email.
The scammers do this by using HTML (website code) in the email to make it look like one link but go somewhere else.
Example: This link says http://www.google.com but it goes to Yahoo.com

========================

General Information:
Someone recently forwarded me an email they received that appeared to be from TheSamba.com. This message is NOT from the site. I would never send an email telling you to "click here" and enter your account information. Only scam emails ask you to do this.

Quote: Subject: TheSamba.com - Possible Fraud attempt - Recent contact

TheSamba.com

Dear TheSamba.com member,
You have recently contacted an user (gwintsk53) regarding an item placed on our website :

Restored 1970 Westfalia Camper Bus Price: $2900
at: http://www.thesamba.com/vw/classifieds/detail.php?id=491655

After reviewing his account we have confirmed that he placed that item in order to defraud seriour buyers. We have closed his ad and terminated his membership. We have found that he was using a HTML code hidden in the item description that could have compromised your account and every account that has visited his ad. In order to insure you still have access to your account we urge you to follow the link below to login to your account. If your password is not working, feel free to click "Forgot Password" and get a new one. If it works it means your account has not been compromised and there's no need to change it. We thank you for your understanding. We are doing this to facilitate a safe environment for our members to buy and sell on TheSamba.com !

Please click here to verify the security of your account ! If your account IS SAFE, you will be automatically redirected to a random website. You can then return to TheSamba.com to continue your work.

Thanks for visiting the site,
Everett Barnes
http://www.thesamba.com

This e-mail was sent by TheSamba.com - Everett Barnes, located at PO Box 17255, Fountain Hills, AZ 85269 (USA). To not receive further e-mails, please click here or reply to this e-mail with "unlist" in the Subject line.

In addition, the following is not possible as HTML is not allowed in ads on the site:
Quote: We have found that he was using a HTML code hidden in the item description that could have compromised your account and every account that has visited his ad.

If you entered your information on their fake login form please email [email protected] with your username and email address and I will reset your account back to normal with a new password.

Mon Aug 13, 2007 11:55 pm

nice they have all YOUR info Everett

Mon Aug 13, 2007 11:59 pm

Yes, I guess they grabbed my address off the Donate page.

This email is very similar to fake emails I get every day reporting to be from eBay, Paypal, various banks, etc. All fake, of course.

If you look closely at the "Click here" links (don't click on them) you can see they do not go to TheSamba.com website.

At least one person already fell for it...

Fri Aug 17, 2007 2:21 am

yeah, alot of these emails come from really wierd foreign web adresses. Is it just me but does anyone else get those fake stocks emails? It'll have like some wierd shit that I cant understand and then a poem at the bottom, really wierd. The sender adress will be through some adress like www.bunthenger.nu.html.forbe.k and I'll go there (safely) and it'll be some wierd discussion forum. These things come in huge quanities to my bulk folder

Thu Nov 29, 2007 8:44 am

how can we tell for sure if the e-mail is from you or not??

Thu Nov 29, 2007 9:10 am

From above:
Quote: I would never send an email telling you to "click here" and enter your account information. Only scam emails ask you to do this.

There are various emails that get sent out from the site (password reset, etc.), I believe they all have your username in them.

Fri Dec 28, 2007 11:16 pm

I saw one... it said I had a new private message so I clicked the link and logged in but saw no new private message.

then I went and typed in manually the samba.com and changed my password... grrrrr

DW

Sat Dec 29, 2007 9:31 am

That probably means the person canceled their message to you. Unless the link did not go to thesamba.com.

Sat Jan 12, 2008 9:03 am

Quote: Restored 1970 Westfalia Camper Bus Price: $2900
BTW, I googled that Bus ad, if it looks too good to be true, it probably is... Common Sense should prevail.
This person has the same ad in about 20 different sites, from recycler.com to cars.com, et al.

Sun Jan 13, 2008 4:28 am

Ad the reason they want (what you would think is a worthless free account) is so that they can post for sale adds on old well established accounts to scam people out of money. Rule of thumb, use your bookmarks(or safer, type in) to go to the site and then log on.

X

Mon Nov 16, 2009 3:38 pm

Today I received 2 different emails.
These emails are NOT from TheSamba.com.
Do NOT open the attachments and delete them if you see them.
Both of the 2 email addresses below do not exist.

[email protected] wrote: Subject: your mailbox has been deactivated
We are contacting you in regards to an unusual activity that was identified in your mailbox. As a result, your mailbox has been deactivated. To restore your mailbox, you are required to extract and run the attached mailbox utility.

Best regards, thesamba.com technical support.

[email protected] wrote: Subject: your mailbox has been deactivated
We are contacting you in regards to an unusual activity that was identified in your mailbox. As a result, your mailbox has been deactivated. To restore your mailbox, you are required to extract and run the attached mailbox utility.

Best regards, thesamba.com technical support.

Tue Jun 29, 2010 8:12 am

Got these today

Quote: REFERENCE: Your Email to .

You recently sent email to a mailbox that requires authentication of the sender to reduce spam. Before your message can be delivered you must confirm that you are the sender by clicking on the link below and then clicking on the "Deliver" button that will be displayed. Once you have completed this step, no further authorization will be required for future emails that you send to this address.

Please confirm your email by visiting the URL

Thank you for your cooperation in helping us to fight spam.

Regards,
thesamba.com Account Services
-------------------------

Quote: New secret questions were added to your thesamba.com account.

To ensure that your account information remains accurate and secure we notify you whenever this information changes.

This change request was made on Tue, 29 Jun 2010 11:59:10 +0530

If the changes described above are accurate, no further action is needed. If anything doesn't look right, follow the link below to
make changes:

https://edit.thesamba.com/forgot?stage=fe100&src=&intl=us&done=&partner=reg

Regards,
thesamba.com Account Services
-------------------------
Please do not reply to this message. Mail sent to this address cannot be answered.

The blue text above are URLs but if you hover over them, it does NOT go to the site.

I never send these sort of messages.

There is no "thesamba.com Account Services". I use my name for everything.

Tue Jun 29, 2010 10:33 am

Thanks Everett

Sat Sep 11, 2010 4:41 pm

Got this today:

Quote:
[email protected]

Hi,Good Day!!!!!!
My name is Miss.Florence, I saw your profile at ( www.thesamba.com ) today and was moved and become interested in you, I will like you to send me an email to my address ( [email protected] ) so that i can give you my pictures for you to know whom i am.

I believed we can move from here? Remember color or distance does not matter but LOVE matters allot in life). Reply me back with my email address ( [email protected] ) hope to hear from you soon from Miss. Florence

Sat Sep 11, 2010 5:55 pm

Go for it!

LOL, I think the site is on some list of sites to use when spamming...

Sat Sep 11, 2010 5:58 pm

Better than eharmony

Sat Sep 11, 2010 6:16 pm

EZ Gruv wrote: Got this today:

Quote:
[email protected]

Hi,Good Day!!!!!!
My name is Miss.Florence, I saw your profile at ( www.thesamba.com ) today and was moved and become interested in you, I will like you to send me an email to my address ( [email protected] ) so that i can give you my pictures for you to know whom i am.

I believed we can move from here? Remember color or distance does not matter but LOVE matters allot in life). Reply me back with my email address ( [email protected] ) hope to hear from you soon from Miss. Florence

I got that one today too. :lol:

Sat Sep 11, 2010 6:27 pm

I thought about this more as several people who are "popular" on the site forwarded me the same email and I think another answer for these sort of emails is that someone on the site has a computer that is virus-infected and it's using a web site from their browser history to email everyone in their email address book.

Sun Sep 12, 2010 7:00 am

Even Moderhaters are not immune. Received today.

Quote: Hi,Good Day!!!!!!
My name is Miss.Florence, I saw your profile at ( www.thesamba.com )
today and was moved and become interested in you, I will like you to
send me an email to my address ( [email protected] ) so that i
can give you my pictures for you to know whom i am.

I believed we can move from here? Remember color or distance does
not matter but LOVE matters allot in life). Reply me back with my
email address ( [email protected] ) hope to hear from you soon
from Miss. Florence

Mon Sep 13, 2010 10:42 am

I recieved the same email as above today as well word for word. I recently changed my email on the site, and haven't had too many emails yet on it, so I can give you a short list of some people if you want to administer a beat down, everett.