Hey Wayne send me your e-mail address and I will be happy to share my copy of the fabulous money making opportunity. I take it you missed out of this deal?
I thought about him hacking into the system and accessing the e-mail address data directly but I don’t think that is what happened. If he had the raw e-mail addresses he would send directly to them from his yahoo account. But all the e-mails came from the MOC e-mail function. So he used our service and the only (and easiest) interface is the “e-mail a member function”.
These guys are not usually hackers cracking into systems. They are however, highly proficient with scripting tools. Most forums like the MOC are pretty similar in function. You sign up for a membership and then you have total access to the resources. It is pretty easy (using the MOC forum as an example) to write a script that: clicks on the “Member” option on the top of the screen, wait for the list of ids, parse each id, send that id an e-mail, go back and get the next id, send an e-mail, and so on until the end of the page, Then you select the next page, and repeat the process. It wouldn’t take long to process the 6K+ member list at computer speed.
Here are the Internet Headers associated with the e-mail I received. It shows the e-mail was sent from the MOC SMTP server. I even compared it to other legitimate e-mails I had received earlier from the MOC and the routing information is the same. But you have more experience with this crap than I so what do you think?
Delivered-To:
cyoungre@gmail.com
Received: by 10.229.226.194 with SMTP id ix2cs4608qcb; Thu, 4 Nov 2010
21:29:00 -0700 (PDT)
Received: by 10.150.226.5 with SMTP id y5mr2719952ybg.68.1288931339444; Thu,
04 Nov 2010 21:28:59 -0700 (PDT)
Return-Path:
Received: from E497944-104069.forumco.com ([209.85.52.18]) by mx.google.com
with ESMTP id q17si6436742ybk.9.2010.11.04.21.28.59; Thu, 04 Nov 2010
21:28:59 -0700 (PDT)
Received-SPF: neutral (google.com: 209.85.52.18 is neither permitted nor
denied by best guess record for domain of
george_manda01@yahoo.fr)
client-ip=209.85.52.18;
Authentication-Results: mx.google.com; spf=neutral (google.com: 209.85.52.18
is neither permitted nor denied by best guess record for domain of
george_manda01@yahoo.fr) smtp.mail=george_manda01@yahoo.fr
Received: from E497944-104069.forumco.com ([209.85.52.18]) by
E497944-104069.forumco.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 4 Nov
2010 03:17:44 -0500
From: "geo123"
To: "Carl n Susan"
Reply-To:
george_manda01@yahoo.fr
Subject: Sent From Montana Owner's Club Discussion Forum by geo123
Date: Thu, 04 Nov 2010 03:17:35 -0500
Message-ID:
MIME-Version: 1.0
Return-Path:
george_manda01@yahoo.fr
X-OriginalArrivalTime: 04 Nov 2010 08:17:44.0937 (UTC)
FILETIME=[C222FD90:01CB7BF8]