Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.sys.mac.system > #117607

Re: Question about Safari security (spam/malware)

From Alan Baker <nunya@ness.biz>
Newsgroups comp.sys.mac.system
Subject Re: Question about Safari security (spam/malware)
Date 2018-08-06 12:47 -0700
Organization Aioe.org NNTP Server
Message-ID <pka8kb$cf8$1@gioia.aioe.org> (permalink)
References <Yx1aD.12364$XA2.11193@fx38.iad>

Show all headers | View raw


On 2018-08-06 12:43 PM, JF Mezei wrote:
> I received spam recently which :
> ###
>   xxxxxxxx is your pass. Lets get directly to the purpose. Nobody has
> paid me to investigate you. You do not know me and you're probably
> wondering why you're getting this mail?
> 
> actually, I actually setup a malware on the X streaming (porn) web-site
> and do you know what, you visited this website to have fun (you know
> what I mean). While you were viewing video clips, your web browser
> started out functioning as a Remote Desktop that has a key logger which
> gave me accessibility to your screen as well as web cam. Right after
> that, my software gathered every one of your contacts from your
> Messenger, FB, as well as e-mail . Next I made a double-screen video.
> 1st part displays the video you were viewing (you have a fine taste
> haha), and next part shows the recording of your webcam, yeah it is u.
> ###
> 
> Where xxxxxx is a password I have used in the past for accounts
> associated with my name, and still use on some accounts not associated
> with my name.  So obviously, that email got my attention.
> 
> I just want a reality check here.
> 
> It is possible that this stems from some old database theft where they
> got my email address and password to some store etc, and that this
> password has long ago ceased to be in used for serious service, but
> still used for porn.

Yes. That is almost certainly what this is.

They got your email and an old password from some database hack where 
the data is available online.

Check here:

<https://haveibeenpwned.com/>

> 
> BUT, as a reality check:
> 
> Could a malware ad running in a window on Safari:
> 	-access list of contacts ?
> 	-obtain my identity/email address ?
> 	-capture keystrokes from Safari to capture a password entry?
> 
> 
> I know that with the next OS-X, Apple announced that it would act like
> IOS in terms of limitiung what information each app can access, which
> would lend one to believe that Safari might have the power to access my
> contacts right now. Is that a correct assumption?

No. That is an ignorant assumption.

> 
> 
> These guys claim to have captured my webcam, but I have no webcam
> connected to my machine. Yet, they got my email address and an old
> password right.
> 
> Again, I am interested in reality check of what is technically possible
> or not.
> 

Back to comp.sys.mac.system | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 15:43 -0400
  Re: Question about Safari security (spam/malware) Alan Baker <nunya@ness.biz> - 2018-08-06 12:47 -0700
  Re: Question about Safari security (spam/malware) nospam <nospam@nospam.invalid> - 2018-08-06 15:53 -0400
    Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 17:20 -0400
  Re: Question about Safari security (spam/malware) Savageduck <savageduck1@{REMOVESPAM}me.com> - 2018-08-06 14:12 -0700
  Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 17:23 -0400
    Re: Question about Safari security (spam/malware) Wade Garrett <wade@cooler.net> - 2018-08-06 18:26 -0400
    Re: Question about Safari security (spam/malware) Alan Browne <bitbucket@blackhole.com> - 2018-08-06 21:07 -0400
  Re: Question about Safari security (spam/malware) Jolly Roger <jollyroger@pobox.com> - 2018-08-06 22:27 +0000
    Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-06 23:00 -0400
      Re: Question about Safari security (spam/malware) Jolly Roger <jollyroger@pobox.com> - 2018-08-07 03:35 +0000
        Re: Question about Safari security (spam/malware) JF Mezei <jfmezei.spamnot@vaxination.ca> - 2018-08-07 10:56 -0400
  Re: Question about Safari security (spam/malware) Lewis <g.kreme@gmail.com.dontsendmecopies> - 2018-08-06 23:18 +0000
  Re: Question about Safari security (spam/malware) Alan Browne <bitbucket@blackhole.com> - 2018-08-06 21:06 -0400

csiph-web