BlackBerry Forums Support Community
              

Closed Thread
 
Thread Tools
Old 09-26-2005, 09:21 PM   #1
madrabbitt
Thumbs Must Hurt
 
Join Date: Dec 2004
Model: 9530
PIN: 305DF5EC
Carrier: T-mobile
Posts: 57
Default virus warning... sort of.

Please Login to Remove!

Gotten several emails on my blackberry from "register@nextel.blackberry.net" and "webmaster@nextel.blackberry.net"

First couple were gibberish with a zip attatchment with a .doc and .txt files.
Latest one had some text (dont remember, deleted it) with the subject line "*warning* your email account will be deleted"

I finally just logged onto the webclient on the computer to download the zip just to see what it was, of course, my virus scanner spazzed out with a big ol' flashing warning.

So, be this a letter of warning, if you get those emails, just delete them.

BTW. This is the ONLY forum that my direct to BB email is posted in my sig (changing that now) and my direct BB email isnt posted anywhere else, so chances are, this may have come from this forum indirectly (i.e. spider or robot harvester)
__________________
Offline  
Old 09-26-2005, 09:54 PM   #2
Soapm
BlackBerry Extraordinaire
 
Soapm's Avatar
 
Join Date: Apr 2005
Location: The Mile Hi City
Model: 9900
OS: 7.0
Carrier: TMO
Posts: 2,794
Default

Could they have been registration emails? Did you notice they were from Nextel which is your carrier?
Offline  
Old 09-26-2005, 10:14 PM   #3
Jase88
BlackBerry Extraordinaire
 
Join Date: May 2005
Location: Waterloo: Home of RIM
Model: PlayB
Carrier: Bell Mobility
Posts: 1,008
Default

Hmmm. That's not good. Doubtful that the email would have affected your handheld, as it won't open zip files.
Offline  
Old 09-26-2005, 10:30 PM   #4
madrabbitt
Thumbs Must Hurt
 
Join Date: Dec 2004
Model: 9530
PIN: 305DF5EC
Carrier: T-mobile
Posts: 57
Default

Quote:
Originally Posted by Soapm
Could they have been registration emails? Did you notice they were from Nextel which is your carrier?
gee, i had no idea that nextel was my carrier. i also had no idea they might have been from nextel.

what do you think?
__________________
Offline  
Old 09-26-2005, 10:31 PM   #5
madrabbitt
Thumbs Must Hurt
 
Join Date: Dec 2004
Model: 9530
PIN: 305DF5EC
Carrier: T-mobile
Posts: 57
Default

Quote:
Originally Posted by Jase88
Hmmm. That's not good. Doubtful that the email would have affected your handheld, as it won't open zip files.
which is probably a good thing, since i wasnt thinking on the first one.
thats another reason i tried to get them off the web client, letting the virus scanner do its job.

of course, not like the virus would have affected the BB.
__________________
Offline  
Old 09-26-2005, 11:14 PM   #6
Soapm
BlackBerry Extraordinaire
 
Soapm's Avatar
 
Join Date: Apr 2005
Location: The Mile Hi City
Model: 9900
OS: 7.0
Carrier: TMO
Posts: 2,794
Default

Quote:
Originally Posted by madrabbitt
gee, i had no idea that nextel was my carrier. i also had no idea they might have been from nextel.

what do you think?
You said they were from your carrier. "Gotten several emails on my blackberry from "register@nextel.blackberry.net" and [email address]"

Those are registration emails from your carrier and not a virus.
Offline  
Old 09-27-2005, 04:42 AM   #7
madrabbitt
Thumbs Must Hurt
 
Join Date: Dec 2004
Model: 9530
PIN: 305DF5EC
Carrier: T-mobile
Posts: 57
Default

um. learn to read.
re-read my original post.
read it slowly.
read it untill you understand it.
__________________
Offline  
Old 09-27-2005, 11:17 AM   #8
Dawg
No longer Registered.
 
Dawg's Avatar
 
Join Date: Mar 2005
Location: Atlanta
Model: 8330
OS: 4.5.0.138
PIN: 31a6c9c9
Carrier: Verizon BIS
Posts: 13,962
Default

he is reading it quit being an A$$ he is trying to help you. QUOTE=madrabbitt]um. learn to read.
re-read my original post.
read it slowly.
read it untill you understand it.[/QUOTE]

Last edited by Dawg; 09-27-2005 at 02:34 PM.. Reason: removed condisending remark
Offline  
Old 09-27-2005, 02:10 PM   #9
Dusty Saddle
Talking BlackBerry Encyclopedia
 
Join Date: Apr 2005
Location: Maryland
Model: 7250
Carrier: Verizon
Posts: 337
Default

Quote:
Originally Posted by Dawg
he is reading it quit being an A$$ he is trying to help you. he is asking are they from nextel whos the sender read slowly W H O A R E T H E Y F R O M A R E T H E Y F R O M N E X T E L ?
No, they are not from Nextel. This is a new way of trying to get folks to open an attachment containing avirus. I received similar messages on my desktop. It's probably some type of automatic program that makes it look like it is coming from your domain administrator and it gets sent to everyone on the domain.
__________________
Dusty
Offline  
Old 09-27-2005, 09:19 PM   #10
Nextel User
BlackBerry Extraordinaire
 
Nextel User's Avatar
 
Join Date: May 2005
Model: 8220
Carrier: AT&T
Posts: 1,146
Default

ok... first of all its not from nextel. for those who know how to read an address. the sender's name always comes just to the left of the .com or .net . hence these emails are from blackberry. nextel is the carrier. they probably were sending you a registration email to activate your BB with the Nextel BWC.
__________________
Get Hebrew For Your Blackberry
http://cheservices.com/blackberry/
Offline  
Old 09-27-2005, 09:23 PM   #11
Dusty Saddle
Talking BlackBerry Encyclopedia
 
Join Date: Apr 2005
Location: Maryland
Model: 7250
Carrier: Verizon
Posts: 337
Default

Quote:
Originally Posted by Nextel User
ok... first of all its not from nextel. for those who know how to read an address. the sender's name always comes just to the left of the .com or .net . hence these emails are from blackberry. nextel is the carrier. they probably were sending you a registration email to activate your BB with the Nextel BWC.
Nope, they are bogus addresses sent by someone trying to spread a virus. They obviously do not know that they won't work on the blackberry.
__________________
Dusty
Offline  
Old 09-29-2005, 07:26 PM   #12
madrabbitt
Thumbs Must Hurt
 
Join Date: Dec 2004
Model: 9530
PIN: 305DF5EC
Carrier: T-mobile
Posts: 57
Default

ok. it appears that at one person understood what i said, so i know i'm not writing in gibberish.

Allow me to paraphrase my original post using little words for the slow people.

I have gotten some FAKE emails. The FAKE emails were from addresses that make you THINK they are from a legit source. They are not. They are FAKE. I know they are fake. I know they are fake because I opened one on my computer, and the virus scanner detected a virus on the attatchment. They are not from nextel. They are fake. They are not from blackberry. They are fake. They are not from a legit user. They are fake. They are not registration messages. They are fake. I am not trying to register on a BWC, they are fake.

Have I made my post more clear?

Also, as i stated earlier, the ONLY place on the web that my direct to BB email address madrabbitt(at)nextel.blackberry.net was posted was on this forum (since changed) so likely, whatever source of gathering of email addresses (i.e. robots or email harvesters) has likely scanned this site at some point, thus the original reason for my putting the warning on here.

BTW. On nextel, registration messages come from "mobileoffice@nextel.com" and not any other address.


And thank you, Dusty Saddles for showing i'm not a total idiot.
__________________

Last edited by madrabbitt; 09-29-2005 at 07:28 PM..
Offline  
Old 09-29-2005, 07:29 PM   #13
madrabbitt
Thumbs Must Hurt
 
Join Date: Dec 2004
Model: 9530
PIN: 305DF5EC
Carrier: T-mobile
Posts: 57
Default

Quote:
Originally Posted by Dawg
he is reading it quit being an A$$ he is trying to help you.
he wasnt asking if they were from nextel, he was telling me they were from nextel, and telling me that they were registration emails.
__________________
Offline  
Old 09-29-2005, 08:00 PM   #14
Mark Rejhon
Retired BBF Moderator
 
Mark Rejhon's Avatar
 
Join Date: Aug 2004
Location: Ottawa, Ontario, Canada
Model: Bold
Carrier: Rogers
Posts: 4,870
Default

These are not registration emails.

I am getting these fake emails on my PC and copies of the email from my PC to my BlackBerry. Just delete them.

Although it says @nextel.blackberry.net in the virus email, it is spoofed. This virus is also coming falsely from @<YOUREMAIL>.com whichever you are. If you are working at Microsoft with a microsoft.com email address, the fake emails are coming from @microsoft.com ... The virus is pretending to be your system administrator and automatically faking the email address from the same domain name as your email address.

It's spoofed. It's definitely not from Nextel. It's a PC virus spreading around.

Also, please stop fighting. It's just a simple misinterpretation, that's all.
__________________
Thanks,
Mark Rejhon
Author of XMPP extension XEP-0301:
www.xmpp.org/extensions/xep-0301.html - specification
www.realjabber.org - open source

Last edited by Mark Rejhon; 09-29-2005 at 08:02 PM..
Offline  
Old 09-29-2005, 08:23 PM   #15
madrabbitt
Thumbs Must Hurt
 
Join Date: Dec 2004
Model: 9530
PIN: 305DF5EC
Carrier: T-mobile
Posts: 57
Default

i'm rather surprised that i havent gotten them on any other email address, probably because past lessons have been not to publically post any email address anywhere.

Although last night i got three on the BB when i was trying to sleep, and stupid me broke the "no blackberry in the gf's house" rule... and i put it right by the stereo speakers too... oops.
__________________
Offline  
Old 09-30-2005, 03:15 AM   #16
Soapm
BlackBerry Extraordinaire
 
Soapm's Avatar
 
Join Date: Apr 2005
Location: The Mile Hi City
Model: 9900
OS: 7.0
Carrier: TMO
Posts: 2,794
Default

Quote:
Originally Posted by madrabbitt
Although last night i got three on the BB when i was trying to sleep, and stupid me broke the "no blackberry in the gf's house" rule... and i put it right by the stereo speakers too... oops.
Did someone say slow...
Offline  
Old 09-30-2005, 03:45 AM   #17
gene.trujillo
New Member
 
Join Date: Aug 2005
Model: 7280
Posts: 8
Default

I've talked to a couple other people who have had similar messages coming from "customerservice@mycingular.blackberry.net" and "admin@mycingular.blackberry.net". The only people I know who have received this receive it on their bis email address. They are indeed a virus, affecting not the bb but the pc if anyone is foolish enough to log into wc, and execute an attached file.

Here is a Cingular knowledge base article about something similar.
Offline  
Old 09-30-2005, 04:10 AM   #18
Jase88
BlackBerry Extraordinaire
 
Join Date: May 2005
Location: Waterloo: Home of RIM
Model: PlayB
Carrier: Bell Mobility
Posts: 1,008
Default

It's called, "Phishing". This isn't a new phenomena on the Internet....
Offline  
Old 09-30-2005, 04:35 AM   #19
gene.trujillo
New Member
 
Join Date: Aug 2005
Model: 7280
Posts: 8
Default

It is a little more than phishing though, since it actually includes a malicious payload.
Offline  
Old 09-30-2005, 04:38 AM   #20
Jase88
BlackBerry Extraordinaire
 
Join Date: May 2005
Location: Waterloo: Home of RIM
Model: PlayB
Carrier: Bell Mobility
Posts: 1,008
Default

Quote:
Originally Posted by gene.trujillo
It is a little more than phishing though, since it actually includes a malicious payload.
Good point.
Offline  
Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


6500/1 A 6502 VARIENT CPU COMMODORE USE IN AMIGA KB & 1520 PLOTTER NMOS NCR NOS picture

6500/1 A 6502 VARIENT CPU COMMODORE USE IN AMIGA KB & 1520 PLOTTER NMOS NCR NOS

$5.89



New Greaseweazle V4.1 USB Floppy Adapter Flux Reader Writer Amiga Atari ST 1591 picture

New Greaseweazle V4.1 USB Floppy Adapter Flux Reader Writer Amiga Atari ST 1591

$28.46



[1pcs] 8520A-1 CSG 8520A-1  Commodore Amiga DIP40 USED picture

[1pcs] 8520A-1 CSG 8520A-1 Commodore Amiga DIP40 USED

$15.57



[1pcs] 8520A-1 MOS 8520A-1  Commodore Amiga DIP40 USED picture

[1pcs] 8520A-1 MOS 8520A-1 Commodore Amiga DIP40 USED

$15.07



1PC USED A54MA55B BC186A413G52 Mitsubishi A500/F540 Series 55KW Drive Board #CZ picture

1PC USED A54MA55B BC186A413G52 Mitsubishi A500/F540 Series 55KW Drive Board #CZ

$317.00



1PC USED A54MA30B Mitsubishi F500/A500/A540 Series 30-37KW Drive Main Board #CZ picture

1PC USED A54MA30B Mitsubishi F500/A500/A540 Series 30-37KW Drive Main Board #CZ

$255.00







Copyright © 2004-2016 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.