Bogus e-mails from @bf2s.com

2006-04-21 03:34:17

#1

duk0r: Administrator; +306|6880|Austin, TX

To keep from even more threads opening up (and another reason to bitch at people for not searching ) I decided to address the bogus e-mails that some people are getting from bf2s.com.

Lately some people have been getting emails like this:

From: admin[at]bf2s.com
To: [email protected]
Subject: WARNING: New ******* BF2 Aimbot Confirmed legit.

Message:
Hey everyone, I am writing to inform you all of some very ... Disturbing news. It seems like everyones \"favorite\" hack website ( http://www.punkbuster.com ) Has released a BF2 aimbot and the commander hack is back also. There is a way however to spot enemys using the aimbot. If you see a player get 3 or 4 kills in a row with a rifle/pistol, try and watch them very closely. If they are looking through walls and ammasing massive kills its most likely they are hacking. Remember, the only \"perfect\" anti cheat is having a admin present at all times. We all were ignorant for thinking that client hooks and aimbots would not touch BF2, when it has become as popular as it has. This was something that was destined to happen, so Please prepare yourself.
Blah blah blah... etc...

(urls and other things removed to protect the non-cheaters)

BF2s.com will NEVER send you unsolicited e-mails, EVER! (if there is news we will post it on the website)
This is just some spammer sending out e-mails as @bf2s.com. It's not us!

If you are thinking about trying it out (the hack), punkbuster sure is thirsty for some hardware bans.
Please do not create anymore threads about this.
Thank you,
Discuss here:

https://bf3s.com/sigs/a3a6d1102d14bf2f7e266fba7f728dc2cc38b316.png

2006-04-21 04:52:41

#2

mporlier: Member; +42|6853|Montreal, Canada

Where did they get our e-mail?

2006-04-21 05:53:23

#3

[DEI]Bart: fire at will!!!; +76|6925|Leiden, Holland for the n00bs

[email protected]
to me
More options 9:41 am (5 hours ago)
MIME-Version: 1.0

Content-Type: multipart/alternative; boundary = RDHJLM44488c93c9fea

Message-Id: <[email protected]>
Date: Fri, 21 Apr 2006 00:41:07 -0700 (PDT)

This is a MIME encoded message.

--RDHJLM44488c93c9fea

Content-Type: text/plain; charset=ISO-8859-1

Content-Transfer-Encoding: base64

SGV5IGV2ZXJ5b25lLCBJIGFtIHdyaXRpbmcgdG8gaW5mb3JtIHlvdSBhbGwgb2Ygc29tZSB2ZXJ5

IC4uLiBEaXN0dXJiaW5nIG5ld3MuIEl0IHNlZW1zIGxpa2UgZXZlcnlvbmVzIFwiZmF2b3JpdGVc

IiBoYWNrIHdlYnNpdGUgKCBodHRwOi8vd3d3Lm1zeHNlY3VyaXR5LmNvbSApIEhhcyByZWxlYXNl

ZCBhIEJGMiBhaW1ib3QgYW5kIHRoZSBjb21tYW5kZXIgaGFjayBpcyBiYWNrIGFsc28uIFRoZXJl

IGlzIGEgd2F5IGhvd2V2ZXIgdG8gc3BvdCBlbmVteXMgdXNpbmcgdGhlIGFpbWJvdC4gSWYgeW91

IHNlZSBhIHBsYXllciBnZXQgMyBvciA0IGtpbGxzIGluIGEgcm93IHdpdGggYSByaWZsZS9waXN0

b2wsIHRyeSBhbmQgd2F0Y2ggdGhlbSB2ZXJ5IGNsb3NlbHkuIElmIHRoZXkgYXJlIGxvb2tpbmcg

dGhyb3VnaCB3YWxscyBhbmQgYW1tYXNpbmcgbWFzc2l2ZSBraWxscyBpdHMgbW9zdCBsaWtlbHkg

dGhleSBhcmUgaGFja2luZy4gUmVtZW1iZXIsIHRoZSBvbmx5IFwicGVyZmVjdFwiIGFudGkgY2hl

YXQgaXMgaGF2aW5nIGEgYWRtaW4gcHJlc2VudCBhdCBhbGwgdGltZXMuIFdlIGFsbCB3ZXJlIGln

bm9yYW50IGZvciB0aGlua2luZyB0aGF0IGNsaWVudCBob29rcyBhbmQgYWltYm90cyB3b3VsZCBu

b3QgdG91Y2ggQkYyLCB3aGVuIGl0IGhhcyBiZWNvbWUgYXMgcG9wdWxhciBhcyBpdCBoYXMuIFRo

aXMgd2FzIHNvbWV0aGluZyB0aGF0IHdhcyBkZXN0aW5lZCB0byBoYXBwZW4sIHNvIFBsZWFzZSBw

cmVwYXJlIHlvdXJzZWxmLg0KDQoNClRoZXJlIGFyZSBtb3ZpZXMgb2YgdGhpcyBhaW1ib3Qgb3V0

LCBzbyB3YXRjaCB0aGVtIGFuZCBnZXQgZmFtaWxpYXIgd2l0aCB0aGVtLCBzbyB5b3Uga25vdyB3

aGF0IHRvIGxvb2sgZm9yLiBIZXJlIGFyZSBzb21lIGxpbmtzIHRvIHRoZSBtb3ZpZXMuDQoNCmh0

dHA6Ly9tZWRpYS5wdXRmaWxlLmNvbS9NU1gtVmlkZW8yMjIyDQpodHRwOi8vbWVkaWEucHV0Zmls

ZS5jb20vTVNYLUFpbWJvdA0KaHR0cDovL21lZGlhLnB1dGZpbGUuY29tL01TWFZpZGVvMjNfMDAw

Mg0KaHR0cDovL3ZpZGVvLmdvb2dsZS5jb20vdmlkZW9wbGF5P2RvY2lkPS0zMDc3NzE1NDA0NTY4

OTA1NTAzDQpodHRwOi8vbWVkaWEucHV0ZmlsZS5jb20vcHduYWdlNTU4MA0KaHR0cDovL3ZpZGVv

Lmdvb2dsZS5jb20vdmlkZW9wbGF5P2RvY2lkPS0zNjQ5MTQxMTg4ODQwNzg2NzE1DQpodHRwOi8v

ZmlsZXMuZmlsZWZyb250LmNvbS9NU1hQSndtdi87NDkwNjMwODs7L2ZpbGVpbmZvLmh0bWwNCmh0

dHA6Ly9tZWRpYS5wdXRmaWxlLmNvbS9NU1gtU2VjdXJpdHktLS1CYWRrYXJtYS0tLVZpZGVvLTIN

Cmh0dHA6Ly9yYXBpZHNoYXJlLmRlL2ZpbGVzLzE2MTk4NzMxL2I0ZGs0cm1hc19CRjJfVmlkZW8u

TVNYQmV0YS53bXYuaHRtbCA=

--RDHJLM44488c93c9fea

Content-Type: text/html; charset=ISO-8859-1

Content-Transfer-Encoding: base64

SGV5IGV2ZXJ5b25lLCBJIGFtIHdyaXRpbmcgdG8gaW5mb3JtIHlvdSBhbGwgb2Ygc29tZSB2ZXJ5

IC4uLiBEaXN0dXJiaW5nIG5ld3MuIEl0IHNlZW1zIGxpa2UgZXZlcnlvbmVzIFwiZmF2b3JpdGVc

IiBoYWNrIHdlYnNpdGUgKCBodHRwOi8vd3d3Lm1zeHNlY3VyaXR5LmNvbSApIEhhcyByZWxlYXNl

ZCBhIEJGMiBhaW1ib3QgYW5kIHRoZSBjb21tYW5kZXIgaGFjayBpcyBiYWNrIGFsc28uIFRoZXJl

IGlzIGEgd2F5IGhvd2V2ZXIgdG8gc3BvdCBlbmVteXMgdXNpbmcgdGhlIGFpbWJvdC4gSWYgeW91

IHNlZSBhIHBsYXllciBnZXQgMyBvciA0IGtpbGxzIGluIGEgcm93IHdpdGggYSByaWZsZS9waXN0

b2wsIHRyeSBhbmQgd2F0Y2ggdGhlbSB2ZXJ5IGNsb3NlbHkuIElmIHRoZXkgYXJlIGxvb2tpbmcg

dGhyb3VnaCB3YWxscyBhbmQgYW1tYXNpbmcgbWFzc2l2ZSBraWxscyBpdHMgbW9zdCBsaWtlbHkg

dGhleSBhcmUgaGFja2luZy4gUmVtZW1iZXIsIHRoZSBvbmx5IFwicGVyZmVjdFwiIGFudGkgY2hl

YXQgaXMgaGF2aW5nIGEgYWRtaW4gcHJlc2VudCBhdCBhbGwgdGltZXMuIFdlIGFsbCB3ZXJlIGln

bm9yYW50IGZvciB0aGlua2luZyB0aGF0IGNsaWVudCBob29rcyBhbmQgYWltYm90cyB3b3VsZCBu

b3QgdG91Y2ggQkYyLCB3aGVuIGl0IGhhcyBiZWNvbWUgYXMgcG9wdWxhciBhcyBpdCBoYXMuIFRo

aXMgd2FzIHNvbWV0aGluZyB0aGF0IHdhcyBkZXN0aW5lZCB0byBoYXBwZW4sIHNvIFBsZWFzZSBw

cmVwYXJlIHlvdXJzZWxmLg0KDQoNClRoZXJlIGFyZSBtb3ZpZXMgb2YgdGhpcyBhaW1ib3Qgb3V0

LCBzbyB3YXRjaCB0aGVtIGFuZCBnZXQgZmFtaWxpYXIgd2l0aCB0aGVtLCBzbyB5b3Uga25vdyB3

aGF0IHRvIGxvb2sgZm9yLiBIZXJlIGFyZSBzb21lIGxpbmtzIHRvIHRoZSBtb3ZpZXMuDQoNCmh0

dHA6Ly9tZWRpYS5wdXRmaWxlLmNvbS9NU1gtVmlkZW8yMjIyDQpodHRwOi8vbWVkaWEucHV0Zmls

ZS5jb20vTVNYLUFpbWJvdA0KaHR0cDovL21lZGlhLnB1dGZpbGUuY29tL01TWFZpZGVvMjNfMDAw

Mg0KaHR0cDovL3ZpZGVvLmdvb2dsZS5jb20vdmlkZW9wbGF5P2RvY2lkPS0zMDc3NzE1NDA0NTY4

OTA1NTAzDQpodHRwOi8vbWVkaWEucHV0ZmlsZS5jb20vcHduYWdlNTU4MA0KaHR0cDovL3ZpZGVv

Lmdvb2dsZS5jb20vdmlkZW9wbGF5P2RvY2lkPS0zNjQ5MTQxMTg4ODQwNzg2NzE1DQpodHRwOi8v

ZmlsZXMuZmlsZWZyb250LmNvbS9NU1hQSndtdi87NDkwNjMwODs7L2ZpbGVpbmZvLmh0bWwNCmh0

dHA6Ly9tZWRpYS5wdXRmaWxlLmNvbS9NU1gtU2VjdXJpdHktLS1CYWRrYXJtYS0tLVZpZGVvLTIN

Cmh0dHA6Ly9yYXBpZHNoYXJlLmRlL2ZpbGVzLzE2MTk4NzMxL2I0ZGs0cm1hc19CRjJfVmlkZW8u

TVNYQmV0YS53bXYuaHRtbCA=

better that this isnt yours....

2006-04-21 06:00:11

#4

D1TAG: Member; +0|6897

Not sure how bogus you may say it is but this is the E-mail I recieved this morning ...check the videos which are self explanatory:

email

P.S. Sorry but I had already posted this in a different thread and this thread came up after i posted.

admin: uh, yeah, the email was already posted, thanks...

Last edited by D1TAG (2006-04-21 06:05:43)

2006-04-21 08:05:57

#5

BellusEndus: Make love not war; +59|6836|Edinburg

mporlier wrote:
Where did they get our e-mail?

They must of run some script on the user list page, or spent hours scrolling through it themselves. I only say that cos I got it through an email address that isn't on this acount cos I think I signed up ages ago and forgot (sorry...).

Either that or theres a hole in punBB...

2006-04-21 09:59:02

#6

chuyskywalker: Admin; +2,439|7060|"Frisco"

BellusEndus wrote:
mporlier wrote:
Where did they get our e-mail?
They must of run some script on the user list page, or spent hours scrolling through it themselves. I only say that cos I got it through an email address that isn't on this acount cos I think I signed up ages ago and forgot (sorry...).

Not possible. Your email address is never revealed to a user when going through any lists on this board. Please check you facts before spreading FUD.

BellusEndus wrote:
Either that or theres a hole in punBB...

I doubt it.

2006-04-21 10:57:35

#7

GAK-Blaskowitz: Member; +0|6964

Well, they got it from somewhere....I know the only time I have entered my email on this board was when I registered....

2006-04-21 11:05:11

#8

Dr.Battlefield: Got milk?; +150|6964

GAK-Blaskowitz wrote:
Well, they got it from somewhere....I know the only time I have entered my email on this board was when I registered....

There is a button "e-mail" in your avatar.

Last edited by Dr.Battlefield (2006-04-21 12:56:34)

2006-04-21 13:13:10

#9

sparklet: Banned; +34|6960|stop corecting my grammer!!!!!

its looks like a pretty cool hack beter go buy it !!! lol jk

2006-04-21 17:31:37

#10

masterofx: Member; +1|6824

this may help you out, the path the email took to find me!

Received: from [66.152.98.76] ([66.152.98.76]:44558 "EHLO
clust07-www06.powweb.com") by lmg16.affinity.com with ESMTP
id S527767AbWDUHgR; Fri, 21 Apr 2006 00:36:17 -0700

affinity is my server, powweb is NOT, 66.152.98.76 is not one my ips!

2006-04-21 22:18:34

#11

duk0r: Administrator; +306|6880|Austin, TX

Thanks masterofx.
All that we could probably do is contact the ISP and let them know that unsolicited mail is being sent from that IP.

2006-04-22 05:13:58

#12

BellusEndus: Make love not war; +59|6836|Edinburg

chuyskywalker wrote:
BellusEndus wrote:
mporlier wrote:
Where did they get our e-mail?
They must of run some script on the user list page, or spent hours scrolling through it themselves. I only say that cos I got it through an email address that isn't on this acount cos I think I signed up ages ago and forgot (sorry...).
Not possible. Your email address is never revealed to a user when going through any lists on this board. Please check you facts before spreading FUD.

BellusEndus wrote:
Either that or theres a hole in punBB...
I doubt it.

OK sorry, so how did they get them?

2006-04-22 06:59:57

#13

Poncho: and I'm not a raincoat...; +91|6920|NL

FAQ?

Your gonna put this on FAQ?

2006-04-22 08:31:50

#14

chuyskywalker: Admin; +2,439|7060|"Frisco"

BellusEndus wrote:
OK sorry, so how did they get them?

What makes you assume they even got them from here? I have three accounts on the boards -- none of which got spammed. They obviously didn't get the whole list.

2006-04-22 08:47:51

#15

teco: Member; +0|6796|127.0.0.1

I didn't get this email, thus the originating list probably didn't come from BF2s, instead they just said BF2s in a lame attempt to make it look legit.

It's not that hard to comprehend that they originally spammer could type B-F-2-S

2006-04-22 09:20:15

#16

Echo: WOoKie; +383|6932|The Netherlands

It doesnt make much sence to me, why spend loads of time digging up adresses if you can just make a post on the forums.

Btw does anyone have the links to the movies given in the email? I d like to see these movies meself.

Edit: found the links to the video's in this thread http://forums.bf2s.com/viewtopic.php?id=21655

Last edited by General-Echo (2006-04-22 10:50:00)

2006-04-22 09:46:15

#17

BellusEndus: Make love not war; +59|6836|Edinburg

chuyskywalker wrote:
BellusEndus wrote:
OK sorry, so how did they get them?
What makes you assume they even got them from here? I have three accounts on the boards -- none of which got spammed. They obviously didn't get the whole list.

point taken, I'll shut up now....

2006-04-22 09:50:01

#18

notorious: Nay vee, bay bee.; +1,396|6959|The United Center

chuyskywalker wrote:
BellusEndus wrote:
OK sorry, so how did they get them?
What makes you assume they even got them from here? I have three accounts on the boards -- none of which got spammed. They obviously didn't get the whole list.

isn't it against the rules to have multiple accounts?

bad chuy.

2006-04-22 09:57:58

#19

Fuzzball_the_Shooter: The Photographer.; +81|6917|Central Valley,California

Well, i've getting a ton of wierd e-mails from people. I don't know, but maybe it's from a BF2s member or something.

2006-04-22 10:22:15

#20

Cybargs: Moderated; +2,285|6929

1 question for chuy, did they go a bf2s e-mail by registering a special domain via an isp? i think its pretty possible though

https://cache.www.gametracker.com/server_info/203.46.105.23:21300/b_350_20_692108_381007_FFFFFF_000000.png

2006-05-01 20:47:16

#21

Viper007Bond: Moderator Emeritus; +236|7018|Portland, OR, USA

Dude, the "from" is faked.

I can send an e-mail that says it's from [email protected] if I wanted. Takes like 2 seconds. Never trust the "from" on an e-mail address.

And I have an e-mail address just for these forums and I have yet to get any spam via it, so it's definetly not these forums where they are getting your e-mail address from.

https://bf3s.com/sigs/044900892044e7fc95e599e832a086ae9bcd7efb.png

2006-05-02 06:00:43

#22

UON: Junglist Massive; +223|6866

Viper007Bond wrote:
Dude, the "from" is faked.

I can send an e-mail that says it's from [email protected] if I wanted. Takes like 2 seconds. Never trust the "from" on an e-mail address.

And I have an e-mail address just for these forums and I have yet to get any spam via it, so it's definetly not these forums where they are getting your e-mail address from.

You're using the send email via form which hides the address... there's a setting which let's you publish your email address and some users seem to have it enabled.

I'd recommend everyone who doesn't want to risk spam emails should go the to privacy tab of profile and check it's set to "Hide your e-mail address but allow form e-mail." to ensure that they can't get harvested.

Last edited by UnOriginalNuttah (2006-05-02 06:01:01)

2006-05-02 16:26:27

#23

Viper007Bond: Moderator Emeritus; +236|7018|Portland, OR, USA

Yeah, I know, but someone suggested that these forums had been hacked or something. I was pointing out that that's not the case.

BF2S Forums Bogus e-mails from @bf2s.com

mporlier wrote:

BellusEndus wrote:

mporlier wrote:

BellusEndus wrote:

GAK-Blaskowitz wrote:

chuyskywalker wrote:

BellusEndus wrote:

mporlier wrote:

BellusEndus wrote:

BellusEndus wrote:

chuyskywalker wrote:

BellusEndus wrote:

chuyskywalker wrote:

BellusEndus wrote:

Viper007Bond wrote:

Board footer