Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #117613

Re: Question about Safari security (spam/malware)

Show all headers | View raw

On 2018-08-06, JF Mezei <jfmezei.spamnot@vaxination.ca> wrote:
> I received spam recently which :
> ###
>  xxxxxxxx is your pass. Lets get directly to the purpose. Nobody has
> paid me to investigate you. You do not know me and you're probably
> wondering why you're getting this mail?
>
> actually, I actually setup a malware on the X streaming (porn) web-site
> and do you know what, you visited this website to have fun (you know
> what I mean). While you were viewing video clips, your web browser
> started out functioning as a Remote Desktop that has a key logger which
> gave me accessibility to your screen as well as web cam. Right after
> that, my software gathered every one of your contacts from your
> Messenger, FB, as well as e-mail . Next I made a double-screen video.
> 1st part displays the video you were viewing (you have a fine taste
> haha), and next part shows the recording of your webcam, yeah it is u.
> ###
>
> Where xxxxxx is a password I have used in the past for accounts
> associated with my name, and still use on some accounts not associated
> with my name.  So obviously, that email got my attention.
>
> I just want a reality check here.
>
> It is possible that this stems from some old database theft where they
> got my email address and password to some store etc, and that this
> password has long ago ceased to be in used for serious service, but
> still used for porn.

That's exactly it. It's a well-known practice.

> BUT, as a reality check:
>
> Could a malware ad running in a window on Safari:
> 	-access list of contacts ?

No.

> 	-obtain my identity/email address ?

Only if you actively input it in a form.

> 	-capture keystrokes from Safari to capture a password entry?

See above.

> I know that with the next OS-X, Apple announced that it would act like
> IOS in terms of limitiung what information each app can access, which
> would lend one to believe that Safari might have the power to access my
> contacts right now. Is that a correct assumption?

Nope. Take a look at System Preferences > Security & Privacy > Privacy.
The only apps that can access your contacts (and other things) are
listed there. If an app isn't listed there and asks to access your
contacts, you'll see a message from the system asking you if it's okay
to grant access to that app. 

> These guys claim to have captured my webcam, but I have no webcam
> connected to my machine. 

Form mail phishing schemes have to make assumptions like that to scare
people into doing their bidding. Social engineering like that obviously
works on a lot of people.

> Yet, they got my email address and an old password right.

Some service you used in the past was compromised.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 15:43 -0400
  Re: Question about Safari security (spam/malware) Alan Baker <nunya@ness.biz> - 2018-08-06 12:47 -0700
  Re: Question about Safari security (spam/malware) nospam <nospam@nospam.invalid> - 2018-08-06 15:53 -0400
    Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 17:20 -0400
  Re: Question about Safari security (spam/malware) Savageduck <savageduck1@{REMOVESPAM}me.com> - 2018-08-06 14:12 -0700
  Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 17:23 -0400
    Re: Question about Safari security (spam/malware) Wade Garrett <wade@cooler.net> - 2018-08-06 18:26 -0400
    Re: Question about Safari security (spam/malware) Alan Browne <bitbucket@blackhole.com> - 2018-08-06 21:07 -0400
  Re: Question about Safari security (spam/malware) Jolly Roger <jollyroger@pobox.com> - 2018-08-06 22:27 +0000
    Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 23:00 -0400
      Re: Question about Safari security (spam/malware) Jolly Roger <jollyroger@pobox.com> - 2018-08-07 03:35 +0000
        Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-07 10:56 -0400
  Re: Question about Safari security (spam/malware) Lewis <g.kreme@gmail.com.dontsendmecopies> - 2018-08-06 23:18 +0000
  Re: Question about Safari security (spam/malware) Alan Browne <bitbucket@blackhole.com> - 2018-08-06 21:06 -0400

csiph-web