Has your MSE forum email address been spammed.

MSE_Martin

Just to echo webby's remarks. We've worked hard to try and find an issue, but we can only find the symptom not the problem. Still we've (to carry on the metaphore) taken a few more vaccinations and hope that'll help things.

Sorry to anyone who's been affected by this....

redux

There has been a recurrence of this, with some members affected for the first time, according to a recent thread in the Arms, and some of these also say it's on email addresses they consider unique to MSE.

Was this another breach, or do you suppose that the people who hacked the email addresses saved this new batch up since a couple of months ago?

I hesitated to post this enquiry in public, but 2 messages I've sent related to this have produced no reply.

alanwsg

I've been keeping a close eye out and I haven't seen any more instances of it.

Former_MSE_Webmaster

redux wrote: »

There has been a recurrence of this, with some members affected for the first time, according to a recent thread in the Arms, and some of these also say it's on email addresses they consider unique to MSE.

Was this another breach, or do you suppose that the people who hacked the email addresses saved this new batch up since a couple of months ago?
.

While it's not impossible, we have no reason to believe there has been another breach and I think it less likely than them using another batch of previously harvested e-mails.

The tightening of security is an ongoing process and we hope to negate this kind of issue in the future.

Apologies again to anyone affected.


Webby

jamesd

One possibly helpful step by those who can use different emails for different purposes would be to use one address for the newsletter and another for the forum. That may give a clue about which one is affected by any security issue.

For some purposes I also use addresses with an embedded creation date and that might reveal the time of any breach if a few people do this.

I'll assume that the MSE staff are already subscribing to the mailing list with some test addresses hosted at a range of major providers since that's routine good practice for anyone with a big list, mainly to monitor delivery issues. It may reveal issues of compromise with specific providers. Date stamps in addresses can be handy here as well.

bonzer

jamesd wrote: »

One possibly helpful step by those who can use different emails for different purposes would be to use one address for the newsletter and another for the forum. That may give a clue about which one is affected by any security issue.

I did have mine like that in this instance - it was the forum that was the source.

alanwsg

bonzer wrote: »

I did have mine like that in this instance - it was the forum that was the source.

same here.

pelago

Same here. In fact I don't subscribe to the newsletter.

Kay_Peel

I've just sent a report and forwarded the spammy email. Hopefully, I've given all the details that have been asked for

The Email was from BreakingNews @ MoneyExpert.com entitled 'Gold at Record High. Get 25% extra. Special offer blah blah.

The company behind the email is Cash My Gold.

Cash My Gold is a trading name of Bullion Buying Limited, Radway Green Business Centre, Radway Green, Alsager, Crewe. CW2 5PR

k-k-k-katy

MSE_Webmaster wrote: »

Hi folks,


Thankfully, we only keep registration e-mail addresses, so the downside problem is relatively limited, although we do understand that the increase in spam is annoying.


Webby

Annoying? If only! Annoying isn't the word. Links to websites don't work anymore, I get entirely unrelated sites, often !!!!!!. For a web site dedicated to managing money efficiently they haven't managed the threat, or consequences, to their members very well. I'm a bit off moneysaver!