Page 1 of 1

Potential Malware Attempt

Posted: Fri Apr 27, 2018 11:27 am
by HiredGun
Heads up to CC writers of a potential malware attempt coming through CC's messaging system. Received the following message from "Dennomugambirr9" with a downloadable file (didn't click on the link). CC admin has been notified.


Hey, I looked at your profile and I'm impressed. Please take a look at my guidelines and let me know if that's something you can do:

Password: 123456

Re: Potential Malware Attempt

Posted: Fri Apr 27, 2018 12:43 pm
by Gauderbock
Yep, it had a VB script named "payment terms" in the attachment. And the script was highly obfuscated. Very dodgy :roll:

Re: Potential Malware Attempt

Posted: Fri Apr 27, 2018 1:35 pm
by HiredGun
Gauderbock wrote:Yep, it had a VB script named "payment terms" in the attachment. And the script was highly obfuscated. Very dodgy :roll:
Good to know. I did a quick Google search for the user name and couldn't find a single reference for them online. Glad to know I'm not the only one who thought the message was questionable. ʘ‿ʘ

Re: Potential Malware Attempt

Posted: Mon May 07, 2018 11:53 pm
by Abbamay
Hi everyone,

Thanks for discussing this. I received the same message and .zip file from Devvnerys67 and my computer said it was a virus. I hope nobody has real issues with this! I sent the info to CC so maybe they can help.

Take care everyone,
Abba May

Re: Potential Malware Attempt

Posted: Tue May 08, 2018 2:06 am
by Isabelnewth
I downloaded it stupidly and have had endless trouble since. Now on internet at public library having been locked out of computer and phone and all contacts deleted! SO DONT DOWNLOAD. I have told CC too.

Re: Potential Malware Attempt

Posted: Tue May 08, 2018 8:24 am
by HiredGun
I've made it a firm policy on Constant Content to not click on links offered by potential clients. Any respectable client won't have a problem copy/pasting their information into a message on the CC messaging interface. Just tell 'em you have a 'no click policy'. :D

Re: Potential Malware Attempt

Posted: Tue May 08, 2018 12:02 pm
by Abbamay
That’s terrible, Isabel - I’m really sorry for you!

Re: Potential Malware Attempt

Posted: Sat May 19, 2018 8:12 am
by AnnaL
I've had three of these come through my mailbox in the past month - CC needs to step up and do something about this. For example, they could limit the sending of links and attachments to customers with accounts that are 30+ days old and have made a purchase before.

Re: Potential Malware Attempt

Posted: Sat May 19, 2018 1:08 pm
by HiredGun
AnnaL wrote:I've had three of these come through my mailbox in the past month - CC needs to step up and do something about this. For example, they could limit the sending of links and attachments to customers with accounts that are 30+ days old and have made a purchase before.
Would be nice if Constant Content's IT department did as you suggest, but they might just say writers shouldn't be having any communications with a client off the CC platform, and that includes downloading/click on outside links. Insist ALL communications happen on the CC platform, including things like viewing writer guidelines (client can copy/paste them into a CC message), and problem is solved. Scammers are the only ones who will have a problem with you insisting they use the CC platform for communications (as per CC's ToS).

Re: Potential Malware Attempt

Posted: Sun May 20, 2018 6:46 am
by Judith
I've received two requests like that so far. My policy is DELETE. I never open links.

Re: Potential Malware Attempt

Posted: Mon May 21, 2018 8:59 am
by AnnaL
HiredGun wrote:writers shouldn't be having any communications with a client off the CC platform, and that includes downloading/click on outside links
Sure, but that doesn't solve the problem of malware in attachments. There is a major problem here and CC needs to do something to reduce the risk for its writers.

Re: Potential Malware Attempt

Posted: Mon May 21, 2018 9:19 am
by HiredGun
AnnaL wrote:
HiredGun wrote:writers shouldn't be having any communications with a client off the CC platform, and that includes downloading/click on outside links
Sure, but that doesn't solve the problem of malware in attachments. There is a major problem here and CC needs to do something to reduce the risk for its writers.
But if you don't click on the attachment to the link, no chance of infection, correct? :?: Adopt a "no click on outside links" policy and problem is solved. I do agree it would be nice if CC did something to help. ¯\_(ツ)_/¯ (Not holding my breath)