White Wolf hacked

[Banshee16]

I just got 2 identical emails, as follows:

"After the server white-wolf.com has been hacked admins have refused \"to thank\" us.
We suggest you to buy database white-wolf.com all for 10 $.
In base of 65000 accounts with mails, icq, msn, personal data of users.
Mail for details whtwlfx@yahoo.com"

My main concern is that I just this afternoon bought some material from DrivethruRPG, and the forums there are inaccessible. Has anyone else received this email?

Yes, I received this e-mail, or rather two copies of it that differed slightly from each other, this afternoon. Still changing passwords...

Banshee

 

[Banshee16]

Oops. Yeah I just posted the same thing. Do you still have your copy and what peice of software are you using to look at your email? I'm curious if the sender is the same...

For me, it made it look like I was sending the spam, right back to my own address. This happen to anyone else?

Banshee

 

[Mouseferatu]

Having just checked my headers--and many thanks to Brother Shatterstone for explaining how --I see that mine, too, has the <nobody@falcon.dnsvs.net> address in it.

I wonder if that's a zombie, or if we're lucky enough to hope that they're stupid enough for that to be a real cyber-location.

 

[Brother Shatterstone]

Mouseferatu, your welcome and its a hand tidbit of knowledge to know. Sometimes you get real looking spam that even mimics the correct address (paypal, eBay, etc.) but if you do the above you see that it’s anything but real.

The IP address in question pings as being a real address.

 

[mythusmage]

Got the same message, twice. I expect it's because I have accounts with both White Wolf and Necromancer. I sent both messages to the people at White Wolf just in case.

We need to allow civil litigation against asshats.

 

[mythusmage]

Mouseferatu, your welcome and its a hand tidbit of knowledge to know. Sometimes you get real looking spam that even mimics the correct address (paypal, eBay, etc.) but if you do the above you see that it’s anything but real.

The IP address in question pings as being a real address.

I dumped my copies of the message, could you send that IP address on? I've got an idea. (Don't worry, I'll just be contacting his ISP about TOS violations. )

 

[Nellisir]

New email.

After the server white-wolf.com has been hacked, admins have refused \"to thank\" us.
U can buy database white-wolf.com for 10 $.
In base 65000 accounts with mails, icq, msn, personal data of users.
New page for details & contact http://scharniertheater.de/form.php

"Properties" info:

Received: from falcon.dnsvs.net ([63.247.85.58])
by sccrmxc13.comcast.net (sccrmxc13) with ESMTP
id <20051217201832s13008h59oe>; Sat, 17 Dec 2005 20:18:32 +0000
X-Originating-IP: [63.247.85.58]
Received: from nobody by falcon.dnsvs.net with local (Exim 4.52)
id 1EniVh-0003To-58
for {my email address}; Sat, 17 Dec 2005 15:18:29 -0500
To: {my email address}
Subject: white-wolf.com hack. new info
From: {my email address}
Message-Id: <E1EniVh-0003To-58@falcon.dnsvs.net>
Date: Sat, 17 Dec 2005 15:18:29 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - falcon.dnsvs.net
X-AntiAbuse: Original Domain - comcast.net
X-AntiAbuse: Originator/Caller UID/GID - [99 32756] / [47 12]
X-AntiAbuse: Sender Address Domain - falcon.dnsvs.net
X-Source:
X-Source-Args: /usr/local/apache/bin/httpd -DSSL
X-Source-Dir: /home2/gandalf4/public_html

I hope someone can put this to "good" use, and "thank" him properly....

 

[trancejeremy]

It's funny, the owner of DTRPG/White Wolf wasn't too busy to pimp DTRPG in a thread about the ENWorld GS yesterday, but couldn't address these concerns in this thread.

 

[Mouseferatu]

It's funny, the owner of DTRPG/White Wolf wasn't too busy to pimp DTRPG in a thread about the ENWorld GS yesterday, but couldn't address these concerns in this thread.

It's an ongoing investigation involving the FBI. It's entirely possible that, after their initial announcement, they're limited as to what they can talk about in a public venue.

 

[Ralts Bloodthorne]

For me, it made it look like I was sending the spam, right back to my own address. This happen to anyone else?

Banshee

Same with me.

I just handed off a copy to the FBI and went back to sorting my email.