Comments on: Another Slice of Spam

By: Rob Ferrer

Rob Ferrer — Thu, 08 May 2008 13:28:50 +0000

Thanks for this. alina77vere registered a while ago. I was a bit confused when I got no posts, so thought I’d have a search. I’ll delete the account – thanks

By: joelcory

joelcory — Tue, 25 Mar 2008 22:26:49 +0000

I just turned on “An administrator must always approve the comment”…Call me a control freak.

By: Attempted Spammer… | Strange Times

Attempted Spammer… | Strange Times — Mon, 24 Mar 2008 09:03:26 +0000

[...] is a spammer and Im not the only one. After googling, I found this blog, and this one, both have mentioned this account. So – its deleted and hopefully the world is now spinning [...]

By: Laura

Laura — Sun, 23 Mar 2008 21:24:54 +0000

Yep, yep. It got me too. I was so excited–a person registered, whoo hoo! Oh well. Now deleted and gone. And I downloaded the pdf gladbeast recommended. I’ll get on that tomorrow. Thanks for the good advice!

By: The Cubelodyte

The Cubelodyte — Sun, 23 Mar 2008 18:39:52 +0000

UPDATE: The bot has registered itself again. I’m thinking that perhaps a captcha for new user registration might be a good idea.

By: Colin Mercer On The Inter-Web

Colin Mercer On The Inter-Web — Sun, 23 Mar 2008 12:45:06 +0000

[...] Google came to my rescue, a quick search sent me in the direction of So The Very Rediculous and The Lair of the Cubelodyte blogs. Both basically stating that this is spam tastic! Seems that I’m not the only [...]

By: vblake

vblake — Sun, 23 Mar 2008 02:13:21 +0000

You can add me to the list. And I am very grateful for all the reliable and useful information here – I deleted the account as soon as I read the advice here. I’m hooked – and you’re linked at my site so my friends will know where to go for trustworthy help. Thanks to all these commentators, too. Appreciate all your help.

By: Is alina77vere9uk@gmail.com a Spam User? | So The Very Ridiculous

Is alina77vere9uk@gmail.com a Spam User? | So The Very Ridiculous — Sat, 22 Mar 2008 19:42:46 +0000

[...] Apparently another wordpress user had the same encounter and this wasn’t even the user’s first time. “It looks like whoever created the spambot known as adol77dai51 is at it again; a new out-of-the-blue, non-posting user account “alina77vere9uk@gmail.com” just got created today, with an email address of alina77vere@gmail.com. ” – The Cubelodyte [...]

By: blogmike

blogmike — Sat, 22 Mar 2008 19:28:36 +0000

Thanks for your post. The same user name was used to create an account on my blog. It have since been deleted.

By: gladbeast

gladbeast — Sat, 22 Mar 2008 13:28:10 +0000

fe true.. i was poring over my stats for the time that the user was created and theres no obvious trace at the time they were created, was looking for an ip, the only ip i could find remotely connected was our own machine ip, i run three blogs on the same server and both that were open received user registartions, the other live blog is closed, and two test blogs are closed also, my first thought was that our home machine was compromised, but now i think i was just being paranoid, this is definitely a warning to us wordpress peeps, i’d agree that there is a takedown in progress, i’d refer people back to your post of sept last year, the M.O. is too similar to be coincidental,lets keep our pants ON, keep it up, edd

By: The Cubelodyte

The Cubelodyte — Sat, 22 Mar 2008 05:45:26 +0000

Newdiver, I haven’t ever seen these bots do that. My guess is that the registration attempt was botched somehow, but that’s not even an educated guess. Gladbeast, thanks for the link to the whitepaper. Everybody needs to be up on best security practices these days…

By: SMF

SMF — Sat, 22 Mar 2008 02:03:32 +0000

I recieved a new user registration email alert from alina77vere9uk
so, I did a google search and I found you guys. Thanks for the heads up. The dirty biatch has been deleted
Yes I also have a word press blog.

By: AdamStevenson

AdamStevenson — Sat, 22 Mar 2008 01:49:43 +0000

Thanks for the heads up – your post was exactly what I was looking for.

By: Newdiver

Newdiver — Sat, 22 Mar 2008 00:24:45 +0000

I just got hit by this account as well. At least I was notified that the account was created. When I checked my user list it wasn’t there. Is there a backdoor I should be worried about?

By: gladbeast

gladbeast — Fri, 21 Mar 2008 22:06:55 +0000

hey peepl, the very same thing happened to two blogs i’m running also, might be time to actuall read this..
http://blogsecurity.net/wordpress/wordpress-security-whitepaper/

By: The Cubelodyte

The Cubelodyte — Fri, 21 Mar 2008 21:16:37 +0000

No problem. The same Google search now returns 27 results, including this site. The new bot is on the march.

By: mojunk

mojunk — Fri, 21 Mar 2008 20:29:29 +0000

Yep, same happened on my blog… thanks for the heads up.

By: drewjensen

drewjensen — Fri, 21 Mar 2008 20:06:22 +0000

thanks for the heads up. That entity just signed up for mine as well and I was wondering what the deal was. I kept checking back to see if he/she was going to post pithy comments about my writings, but nothing so far.