Discussion Locked

DO NOT Send To A Friend

0 helpful
19 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Clicking on 'Send To A Friend' sends more than you expect!
(Updated May. 24th, 2009)

After weeks of testing (more on that later), I have proven a suspicion I've had for a long time.

Since this is the Holiday Season, and thus when the 'trap' I've confirmed is most prevalent, it seems an opportune time to share my findings.

We've all seen them.
We've all tried them at one time or another....
Those funny or cute videos, cartoons, games, free offers, greeting cards and such we come across on line that have those convenient little links that say things like; "Send To A Friend," "Share With A Friend," "Click to Email This to a Friend" or "Click Here To Share." It looks so easy and sounds like such a good thing to do. After all, it is FREE.

What's the old saying? " ...If it sounds too good to be true..."
Well... there IS a reason why it is free and it's not because the web site owners are good samaritans. It is because you are providing revenue by clicking on the link and supplying them with active email addresses. Those addresses belonging to your friends and relatives are a valuable commodity to Spammers!

Over the past two months I received a few of those "Sent by a Friend" animated eCards and videos. Even though I didn't click on the link in the email to view them, the damage had been done. They already had my email address. So, after two years with this new email address and priding myself as being totally Spam-Free, I was suddenly receiving four to ten spam emails each day with ads for 'More Affordable Health Insurance,' 'How to Flush Pounds Away,' 'Extend Your Car Warranty,' 'Receive Free Money From The Government,' 'Someone Is Searching For You,' 'Let Debtco Show You How To Erase Debt,' 'Lower Your Heating Bills' along with many other similar come-ons.

I never use this particular, primary email address when ordering things, for signing up for services of any kind, or when registering for a service on line. So I knew that the blasted Spammers must have gotten my address from somewhere else. So I set up some web-based email accounts (a total of eleven) through Yahoo and HotMail to test out my theory.

I then had several friends resend videos and eCards they had previously sent to me to these new addresses. I asked them to use the same method they had used previously by clicking on the 'Send To A Friend' link and submitting the new address I provided. I had those email accounts up ahead of time for one week and used them for nothing else. I also set up one account that was not shared as a control.

I received the emails in the new accounts but didn't open the emails. Opening them or clicking on links within them may further confirm an email address as valid, but it was not necessary for the purpose of my test.

Sure enough! It only took a few days for most of the shared accounts to start getting Spammed. After two weeks, they are now receiving the same Spam emails I am getting at the rate of 2 to 4 every other day. Thus confirming what I and others had suspected:
By providing email addresses, you are supplying Spammers with a list of email addresses that have a high likelihood of being valid and therefore very valuable. The money that web-based companies make from selling lists of valid email addresses is big business and probably earns more for some site owners than banner ads.

So, PLEASE, when you run across something on line that you find hilarious or interesting and you feel compelled to Share it with others. DO NOT select to allow the site to forward it to them for you. Instead, copy the link and send that in an email OR send the eCard, video, etc. to yourself, and when it arrives, forward it to whomever you want. Of course, if you do the latter, be smart and have it sent to a secondary web-based account.
It is a good practice to not hand out other people's email addresses to ANY web site. Even if you feel comfortable with their 'Privacy Policy' and believe them to be reputable, someone less scrupulous could hack into their site and obtain all the addresses they collected!

Keep your friends and relatives privacy and email boxes in mind by not giving out their email addresses! You wouldn't want them to pass YOURS all over the internet, would you?

Through my somewhat limited testing,
The Guilty Spam Proliferators that I confirmed are :

IncrediMail eCards
123 Greetings
Blue Mountain
BGreetings.com
eGreetings.com
GetFunCards.com
MyGamesZone
Funny-City.com

I did not get Spam from links sent through Hallmark.com, MSN.AmericanGreetings.com or JacquieLawson.com

Now that I've alerted you of this sneaky tool of Spammers, please let others know. If for nothing else... to protect yourself from getting buried in Spam.

The disturbing point proven in my test is that the Spam you receive may not be due to any fault of your own but rather the result of friends who unwittingly hand out your email address to sites who then sell it to Spammers.

Remember:
When forwarding email, remove all the previous Sender addresses from the header before hitting Send! This removes another popular source of addresses for Spammers.
Additionally, using the BCC option within your email program is a good alternative when sending or forwarding to multiple recipients.

NOTE:
In case you are wondering... I have been attacking my current Spam problem by using SpamKiller. It gives me a way to send MAILER DAEMON returns to the sender. That is, it sends them a response making it look like it is coming from my ISP stating my email address no longer exists or is invalid. I've used this technique successfully several times when I had a different email address. The sad thing is that it often takes several months of diligence on my part until the Spammers review their lists and remove 'dead' addresses. The version of SpamKiller I use is over 5 years old. Since then the program was purchased by McAfee. http://us.mcafee.com/root/product.asp?productid=msk. It is now $39, but there may now be other tools available for less or free that do the same or better job.

Years ago, before finding a tool to stop it, I became so inundated with Spam that the only course to take was to contact my ISP and request a new address.
Whatever you do, NEVER respond to any unsolicited email! Doing so or clicking on links within the email only serves to prove your address is a valid one. The result is just MORE Spam!

.
UPDATE:
After four months of diligence, working with my ISP, and using SpamKiller, I have now been totally Spam-free for nearly two months.
It CAN be done.
Now... lets see how long it lasts.

19 replies

by thumbsup2

Thanks Captain. That's very good advice. I'm sending the link to your post to all of my family and friends who think it's 'nice' to send me eCards or share those stupid jokes I've already seen several times and at the same time, beg them PLEASE .... don't do me any more [i]favors[/i]! ;)

by dr dij

unless they FORWARD them, with emails the previous sender also sent to included.

I get some newsletters whose editors are too stupid to use BCC and am now getting small# of spams on that email address.

USE the BCC field for mass mailings! not the CC field or all in the 'to: ' field.

that way, someone with a product to sell on the mail list will not spam you, and someone with an email harvester trojan will not collect those email addresses for spam!

by charliespencer

"I get some newsletters whose editors are too stupid to use BCC..."

I 'Reply' to those senders pointing out the security problems with using 'To' or 'CC'. The second time I 'Reply' to those on the original distribution that appear to be at the same workplace as the sender, hoping one is in a position of authority. The third time I 'Reply to All' and let everyone on the original distribution know about it, and add the sender to my black list.

Obviously this implies I don't require the sender, that they aren't a customer. In those cases I just continue to 'Reply' periodically to point out (again) the security problems.

by charliespencer

I'm also not surprised to note two of the non-spamming companies are nationally known firms who were in the greeting card business before it went electronics.

by captbilly1eye

...I should have added "not yet" to my statement that I hadn't received any spam from things sent from their web sites.

I'll be keeping an eye (my good one) on the accounts used at those sites.

Personally, I don't trust any of them and make it a practice to not share anyone's address on line.
That is.... unless my intention is one of revenge and I WANT to see them get an avalance of Spam.
]:)

.

by jaqui

mailwasher

available for one pop3 address free from http://mailwasher.net

for 39.95 US the pro handles more pop3 addresses.

for use with echange, sendmail or qmail, free mailwasher server is linked to from that site.

or go to sourceforge.net and search for mailwasher, download for macosx, linux, windows, i386 to amd / intel x64 as binary installers, or grab the source code and build it yourself.

by captbilly1eye

... can it send fake MailDaemon replies?
That's my favorite feature of this old version SpamKiller and I assume the retail version has it, too.
It also has the capability to Send complaints directly to the ISP of origin.

The thing I like is that it attacks the Spammer rather than just filtering.

I have to say that Roadrunner, my ISP does a very good job of filtering 90% of the Spam. But this latest wave brought on by what appears to be a new breed of Spammers using ever-changing addresses has been quite a challenge.

by jaqui

even the free version, with it's banner advertising the product, one address only limitation, can.

both free and pro will run on linux under wine.

they have a free server version that supports exchange, sendmail and qmail servers.

"Firetrust Email / Internet Security" is the company that puts it out.

by rob miners

I have always had suspicions about some of those programs and now you have confirmed it. I will be letting my contacts and family know about your findings. Well done Mate. ;)

by captbilly1eye

Let's just hope you caught 'em before they already passed along your address to the Spammer Scammers.
;-)

by tig2

I vote that this post is swag worthy. I'm telling Sonja on you!

I have long been in the habit of sending the odd thing I find that I want to share to a web mail address and forwarding it from there. But that habit stemmed from ease of use more than any other thing- I could forward to a group that I could send as a bcc so that I wasn't sending friends addresses to each other.

The spam and valid email thing never occurred to me. It may just be time to set up another "pit" email address. Alternatives can be handy!

by captbilly1eye

If it ultimately helps some from avoiding more Blasted Spam then my work has not been for naught. ... enuf reward in that.
;-)

by rob miners

I was going through an old account that I haven't used for awhile and found these reminders. I haven't any accounts with these banks but they were persistent. LOL :D

From: "OptusNet Customer Service" Sent: Tue 7/04/09 08:46

To: Priority: Low

Subject: [SPAM] Webmail Upgrading Type: HTML Msg

Alert: The users email-address has been added to the addressbook

Attn: Account Owner,

We are requesting this information to verify and protect your identity in other to complete your Account upgrade process.
Warning: you are required to do this before the next 24hrs of receipt of this e-mail, or your Webmail Account will be inactivated and erased from our database.

please proceed by https://memberservices.optuszoo.com.au/login/?target=/myaccount/

Webmail Administrator

From: "OptuZoo Security Measure" Sent: Tue 5/05/09 22:47

To: Priority: Low

Subject: [SPAM] Your Account Warning Type: HTML Msg

Alert: The users email-address has been added to the addressbook

Attn: Optus Member,
This message is of Optus Web mail administrator to all e-mail account. We are currently upgrading our database and e-mail accounts. We remove all unused e-mail account to more space for new accounts.
We have recently launched a very big IP address block against Optus addresses with massive spamming.
To prevent your account from inactive, you are advice to upgrade your account
please proceed by click here to proceed

This is the link: http://retrylink.com/cpa/cpa/mba/optuus/optuus/

Optus Team
Warning! Account holders who refuse to update his account within 24hours of receiving this warning will lose his account permanently from our database

From: "Optus Customer Solutions Team" Sent: Sun 10/05/09 00:35

To: Priority: Low

Subject: [SPAM] Your Account Warning Type: HTML Msg

Alert: The users email-address has been added to the addressbook

============================================================================================
====Attn: E-mail Account Holder,==========
Take note that you are require to upgrade your account now for security purpose

Upgrade now

This is the link: http://deblok.org/cms/language/pdf_fonts/image/cpa/mba/optuus/optuus/index.htm
Sorry for the inconvenience,

Optus Team
Warning! Account holders who refuse to update his account within 24hours of receiving this warning will lose his account permanently from our database
=======================================================================================================================================

From: "Optus Customer Solutions Team" Sent: Mon 11/05/09 15:39

To: Priority: Low

Subject: [SPAM] Your Account Warning Type: HTML Msg

Alert: The users email-address has been added to the addressbook

============================================================================================
====Attn: E-mail Account Holder,==========
Take note that you are require to upgrade your account now for security purpose

Upgrade now

Another Link: http://discountpartyshop.com.au/modules/cpa/mba/optuus/optuus/index.htm
Sorry for the inconvenience,

Optus Team
Warning! Account holders who refuse to update his account within 24hours of receiving this warning will lose his account permanently from our database
=======================================================================================================================================

From: "Optus Customer Service" Sent: Thu 14/05/09 22:35

To: Priority: Low

Subject: [SPAM] Last Warnning about your Account !!! Type: HTML Msg

Alert: The users email-address has been added to the addressbook

============================================================================================
====Attn: E-mail Account Holder,==========
Take note that you are require to upgrade your account now for security purpose

Upgrade now

Yet another Link: http://orchidspng.com/discus_admin_9356210602/template/admin/htaccess/cpa/mba/optuus/optuus/index.htm
Sorry for the inconvenience,

Optus Team
Warning! Account holders who refuse to update his account within 24hours of receiving this warning will lose his account permanently from our database
=======================================================================================================================================

From: Westpac Sent: Wed 21/01/09 19:22

To: ME Priority: Normal

Subject: unlock your account Type: HTML Msg

Alert: The users email-address has been added to the addressbook

Access denied

Your internet banking has been locked due to three consecutive failures of the banking security check.
To unlock your Westpac internet banking, please activate your account below :

Unlock Your Internet Banking LINK? : http://webmail.people.net.au/c

? 2009 Westpac Banking Corporation. All rights reserved.

From: St.George Bank Sent: Sun 30/11/08 15:54

To: ME Priority: Normal

Subject: protect your data Type: HTML Msg

Alert: The users email-address has been added to the addressbook

Protecting Your Account

For your security, your St.George account has been freezed and suspensed
due to change in IP address on our SSL server security to protect your data.

LOGON To Restore Your St.George Bank Account Here http://www.alaturkaradyoch.com/stgeorge/stgeorge/stgeorge/

? St.George Bank Limited ABN 92 055 513 070 AFS Licence No. 240997

From: St.George Bank Sent: Mon 1/12/08 20:00

To: ME Priority: Normal

Subject: verify your account Type: HTML Msg

Alert: The users email-address has been added to the addressbook

At St.George Bank, We recommend, as the user, you also take security seriously because online account has been terminated.
Please use the link below to proceed and verify your account now :

http://stgeorge.com.au/IbankRedirect.asp LINK: http://videohiphop.co.cc/stgeorge/stgeorge/stgeorge/

We want to raise awareness about how you can protect your money.

? St.George Bank Limited ABN 92 055 513 070 AFS Licence No. 240997

From: ANZ Bank Sent: Sun 23/11/08 03:33

To: ME Priority: Normal

Subject: protection message Type: HTML Msg

Alert: The users email-address has been added to the addressbook

Dear ANZ Bank Customer,

Your ANZ Bank account has been violated.
Because your account may have been compromised because someone with ip address 118.106.146.98 tried to access your account.
Please review the transaction and and report any suspicious transactions. Login to verify now: Click Here to Access Your Account.
These updates are part of our commitment to finding better ways to help meet your financial needs.
LINK: http://sky-land.com/images/anzphone/anz/ANZ/Bankmain.htm
Security Advisor,
2008 Australia and New Zealand Banking Group Limited.

by mrparrot

I will definitely be sending this along to everyone in my Address Book.
- using BCC, of course. ;-)

Thanks, Capt.!

by oz_media

I absolutely DESPISE getting those emails (usually with an entire address book in the TO field and not BCC'd).

I have been sent a few over the years, but the sender gets a quick phine call to never send it to me again. I also point out teh address issue to them and explain that if any one of those people gets hit with a virus that uses email to propagate, it will then infect all others in that address list.

People understand how pissed I get over them, I haven't seen one in ages now.

My mum's friend in the UK sends them to her every now and then, she has asked her not to but she still gets them everynow and then.

So I created a rule, based on the to address that if that sender send mail and another TO address is matched, it is for teh recycle bin. This way if she sends a normal email to my mother it will come through, if the other addresses are in the TO address list it is nixed. Seems to work anyway.

by jaqui

unless I know they all have each other's email addresses, I just don't do it. Not even by bcc.

I'll send individual messages, addressed to one person at a time instead.

more effort, yup, but less likely to be a cause of spam.

by oz_media

If it is someone I know, just aimlessly passign on some stupid spam mail (usually old mail they think is new and funny, meanwhile we laughed at it in the 90's), I'll politely fill them in on how addresses are collected and abused.

If it is a company or some spammer, reply to all and add a message to the effect of:

Thank you all for providing your email addresses in such a timely fashion. You'll all be please do know that you have now been added to our email lists, which are also shared freely with the online community.

Either that or go for the same thank you but with the note that all addresses have been added to a registered black list and will no longer be able to send or recieve mail from most addresses.

Don't swallow it, spit back in their face, just as they disregarded your privacy and did so to you.

This discussion is closed to new replies.