From owner-p4-releng@freebsd.org Sun May 15 18:08:35 2016 Return-Path: Delivered-To: p4-releng@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 85053B3C851 for ; Sun, 15 May 2016 18:08:35 +0000 (UTC) (envelope-from bounce@spareroom.co.uk) Received: from smtp02.spareroom.co.uk (mail.spareroom.co.uk [84.39.119.202]) by mx1.freebsd.org (Postfix) with ESMTP id 303D51A0A for ; Sun, 15 May 2016 18:08:34 +0000 (UTC) (envelope-from bounce@spareroom.co.uk) Received: from cron02.spareroom.net (cron02.spareroom.net [172.16.2.122]) by smtp02.spareroom.co.uk (Postfix) with ESMTP id 1773D435FD for ; Sun, 15 May 2016 19:08:34 +0100 (BST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=spareroom.co.uk; s=spareroomcouk; t=1463335714; bh=zwodTt4jKbIklneKzJusIashu87du3LbJb6UazSt+GQ=; h=Subject:Reply-To:To:From:Date; b=obj/gforOvdY7zUtTArQXhLWOgV7vYMA0xz6WCt4aIoi+wUZGppPjI6Smm5HAXcOU 6H4A5xTwlZNN2TM9a5XJ4w9aAqWmUt95nZGkugSBdXw7GKcBiRoQODb1J9vohY1Zxv +dgQBYPTo6HZQkj/CnKJYU0av1rcJiwxPivnWOeg= Received: by cron02.spareroom.net (Postfix, from userid 0) id 153D320789; Sun, 15 May 2016 19:08:34 +0100 (BST) MIME-Version: 1.0 X-Mailer: MIME-tools 5.507 (Entity 5.507) Subject: Fraudulent email warning Reply-To: gemma.craft@spareroom.co.uk To: p4-releng@freebsd.org From: "SpareRoom" Message-Id: <20160515180834.153D320789@cron02.spareroom.net> Date: Sun, 15 May 2016 19:08:34 +0100 (BST) Content-Type: text/plain Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: p4-releng@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: p4 releng tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 May 2016 18:08:35 -0000 Hi, On Saturday 14th, a malicious user used SpareRoom's "Tell a Friend" recommendation system to send messages purporting to be from Bank of America Home Loans. The email said money would be paid into the recipient's bank account and requested bank account details along with other personal information. The email came from a SpareRoom.co.uk email address, but the content of the email is a scam and wasn't in any way sanctioned by SpareRoom. Please don't reply to this email with your bank details or any other personal information. Even though the reply will go to SpareRoom, not the malicious user that created the email, the message was a scam and we don't require your details. However, if you replied to the email address in the body of the email - the one beginning 'bankofamericanewyork.homeloan1' - please contact your bank immediately to let them know. As soon as the source of the emails was discovered we locked this system down to stop it sending any more emails. Other than the misuse of the "Tell a Friend" system, we're not aware of any breaches to the security of SpareRoom. It appears as though the list of email addresses that were targeted were obtained from an external source. There is currently no evidence to suggest that SpareRoom has been hacked; this is an isolated instance of someone misusing a specific feature of the site. We apologise sincerely for any inconvenience caused. Best wishes, The SpareRoom Team gemma.craft@spareroom.co.uk 01625 666 750