Lady_Admin-Spammer

Zenith

Paragon
Joined
Dec 7, 2008
Messages
1,363
Reaction score
0
FP$
6
http://www.google.com/search?hl=en&safe ... art=0&sa=N

If she has registered at your board delete it immediately, all she is going to pm your members to download a fake virus scanner.

Lady_Admin
thumbsdown_smiley.gif
 
Wober got this user and sent a PM to a lot of people on the forum. Wonder if its someone real or a bot?
 
Probably a bot. There is a spamming script which signs up to forums and pm's all the members. If you use phpBB 3.0.6 you can activate the newly registered members group and disable them from sending PM's until that post a certain amount in order to be dropped out of that group. That is what we use here and we have not been hit by any mass PM spammer.
 
It seems to b vBulletin forums this bot is targeting at, but it seems to be getting past captcha and e-mail activation.
 
Most bot scripts can get past email activation and the default CATPCHA of softwares. That is why you need to make your registration different and unique.
 
It's a bot. Just use some anti-spam bot protection system and you should be safe.
 
I didn't get the PM at Wober :shrug: .

I don't own a forum, so that's one less thing I need to worry about.
 
Yeah, I heard that you got this Zenith. What a shame. 🙁 What's the IP address so I can block it?
 
IP blocks tend to be useless as they change IP's quite often. If it was a human then IP bans might be more beneficial but it terms of spam bots they discard and change IP's often as there is so many available for them to use.
 
The best you could do is disallow the username "Lady_Admin" since it appears to be the bots default name.
 
Yes, though it would seem easier to change a username than it would be to change IP addresses (not that changing IP addresses is difficult).
 
If its a bot, there's always a person behind it who has programmed it, so if a forum isn't responding, the bot will most likely be configured to move one, otherwise it would be wasting its time.

Actually changing IP is as simple as a click of a button (reset router). 🙂
 
Hasn't affected me and I hope it doesn't affect me in the future either.
 
Hmm, if I were to disallow its default username would it just start trying random gibberish or would it actually be messed up?
 
Shotgun said:
It's a bot. Just use some anti-spam bot protection system and you should be safe.

Incorrect, I don't think there is a way past reCaptcha which is what I have on my board, so I am guessing they are using an auto-form filler which Internet Explorer has, and it will auto fill any Username, email address fields with the information you want it to with 1 click.

She registered on my board with the name LadyXAdmin.
 
The username will be changed often. Spam bots don't use the same username for ever. They use it for a short while then change it. As for IP's they probably have a list of proxy IP's that they can use and just use one for a short while and then move on and use another.

The way they enter all the information is shown in this video. It is outdated but it does give you an idea of how a spam bot works and how easy it is - http://www.botmaster.net/movies/XFull.htm

http://xrumer-palladium.blogspot.com/20 ... rumer.html
http://xrumer-palladium.blogspot.com/20 ... rumer.html
 
There is no bot that gets around reCaptcha, that is why the major softwares are starting to use it, or at least create MODs for it. 😉
 
Back
Top Bottom