topic Re: ArchiTALK Moderators......please look into this abuse in Modeling

ArchiTALK Moderators......please look into this abuse

rm — Wed, 18 May 2005 13:33:01 GMT

I did not know where to post this, so forgive me if it is the wrong spot. But I figured you would know who to get it to.

Please look at the following link on the AC Job Board:

"ArchiCAD Modelers Needed for large projects - USA
Several large corporate clients working with Graphisoft's Virtual Construction Solution are looking for experienced ArchiCAD modelers. At least 3 years of experience of using ArchiCAD in real world environment is required. Our Clients are working on fast track, high quality projects and are looking for dedicated ArchiCAD modelers to join their team as soon as possible. This is an outstanding opportunity for professionals who are interested in both construction and cutting edge technology.
Apr 26, 2005 Viktor Bullain Graphisoft"

I submitted to it. Several days later I was sent a link in German from the solictor of this ad. I foolishly opened the link which was completely in German. I translated part of it, and it had nothing to do with AC modeling or collaboration. It was spam.

Within hours, I was recieving many emails from sites in German. Either this ad is a phishing scheme, or the GS server is corrupted and has been hacked. PLEASE LOOK INTO THIS IMMEDIATELY.

Thank you!

Re: ArchiTALK Moderators......please look into this abuse

Scott Davis — Wed, 18 May 2005 17:53:42 GMT

There is a variant of the Sober virus is going around via email, which points to a german language website. The virus is transmitted via this website. You simply go to the site, and the virus exploits a security flaw and installs itself while you browse the site. I suggest you get your machine updated with the latest Virus protection, and get it cleaned. You have been infected!

http://vil.nai.com/vil/content/v_133684.htm

Re: ArchiTALK Moderators......please look into this abuse

rm — Wed, 18 May 2005 18:14:56 GMT

Scott wrote:
There is a variant of the Sober virus is going around via email, which points to a german language website. The virus is transmitted via this website.

Scott, I don't know if you noticed, but I am running OS X, not Windows. Forgive me if I am wrong, but I thought that there are actually no viruses attacking OS X, am I way off the page on that?

But more importantly, IS the job posting on the AC Job Board a bogus ad or is Graphisoft a victom of the virus you are speaking about?

Thank you.

Re: ArchiTALK Moderators......please look into this abuse

TomWaltz — Wed, 18 May 2005 19:36:51 GMT

The problem is that someone with you in their Outlook address book has been infected, sending out links to the site.

Re: ArchiTALK Moderators......please look into this abuse

Scott Davis — Wed, 18 May 2005 20:33:38 GMT

oops, sorry, I paid no attetion to the Sig line. This affects windows, so obviously you are ok. I think its coincidental that you received an email from the site you visited. Someone that has your email address is infected, and you are being mass-mailed by a virus running on someone elses computer.

Re: ArchiTALK Moderators......please look into this abuse

Greg Kmethy — Fri, 20 May 2005 08:08:52 GMT

Robert,

The ad was posted by the Graphisoft US office, so I don't know the details of the application, but it is real. What might have happened is that an e-mail collecting virus has collected this e-mail from our site and used it to send spam around the world. It is by chance that you have received a spam from this specific e-mail. I warned our web-team and the US office about this.

Thanks for your post,
Greg

Re: ArchiTALK Moderators......please look into this abuse

Rakela Raul — Fri, 20 May 2005 18:32:12 GMT

i just got an email from patti.mello@graphisoft in chinese....which is the only language i dont speak.....so it could be related to viruses or scam or something.
patti please remove me from ur list and moderator take a look at it..thx

Re: ArchiTALK Moderators......please look into this abuse

Greg Kmethy — Mon, 23 May 2005 12:58:11 GMT

Rakela,

I don't think Patty, or I or anyone can help spam spreading with our names in the 'From' field. If someone's e-mail address appears on any public site, like on the Graphisoft official web page, or an article, or it has been on a contact list of an infected machine, it is prone to e-mail address collecting viruses that will send spam using any name they have ever came across. The address in the 'From' field could even be fake. We can not do anything about it, anyone at any time can send e-mails from a @graphisoft.com address.