Listowners-L Archives

Archiver > Listowners > 2011-08 > 1314554298


From: "Mary D. Taffet" <>
Subject: Re: [LO] A head's up
Date: Sun, 28 Aug 2011 13:58:18 -0400
References: <1BC9EE98E1E44D9791615CE371B7B212@joyce42313bdda>
In-Reply-To: <1BC9EE98E1E44D9791615CE371B7B212@joyce42313bdda>


Joyce,

I've gotten several of these, both to the pending requests and directly
to my inbox. As you say, the names tend to be foreign. If you hover
your mouse over the "confirm" box WITHOUT CLICKING ON IT, you'll see
that the URL it wants to take you to starts with "session" [that is, if
your e-mail program works the same way mine does -- I use Thunderbird].

I knew from the moment that I saw "session" in those URLs that they were
probably related to malware of some sort, and just started deleting them
whenever I got them.

This is especially tricky because I do tend to get requests from other
genealogists I've never met with foreign names who legitimately wish to
connect.

-- Mary


On 8/28/2011 1:45 PM, Joyce Gaston Reece wrote:
> I have received 8 or 10 'pending notification' from what appears to be Facebook via email. They are usually some odd, foreign name. They'll come to your admin address for your lists and you have to be careful to check the address as to where its from. If you click on the email anywhere to log on to face book and deny the request you'll get into some type problem. I got in too big a hurry and my virus protection caught it but not before I saw that it was malware of some kind.
>
> I don't know much more than this but thought to let everyone know so they could check before you click.
>
> Joyce Gaston Reece

This thread: