Post by: jcarter on September 24, 2011, 09:31:14 AM
He just got back from a trip and said he might put some photos up, thats what fooled me.
I clicked upon "Launch", and that was the trigger, which created a $9.99 charge on my iPhone AT&T bill from Fanbox!
Got it taken off, but he said that other friends of his had the same thing happen.
He has no idea where Fanbox came from, nor how they managed to get his name and email, and worse of all, the emails of his friends.
http://www.infobeatmail.com/someone-named-...ing-for-anwers/
This sort of explains what happened to him.
Jane
Post by: Xairbusdriver on September 24, 2011, 12:00:11 PM
- Why?
- How did you know that?
It's the unfortunately natural result of clicking links in emails. Been discussed numerous times here and elsewhere.
Known (and foolproof) prevention rules:
- 1. Don't click links in emails.
2. See rule #1.
Post by: Paddy on September 24, 2011, 12:59:13 PM
Post by: jcarter on September 24, 2011, 02:16:18 PM
Then when I told him about what happened, a day afterwards walking down our street, he said that he had heard from others. If it hadnt been for him telling me about pictures coming, I would certainly never have clicked upon that thing.
It has not affected my computer, just the 10 dollar charge on the iPhone bill which was easily fixed.
I have also heard that you dont actually have to click on some of these things, you can just MOUSE OVER a link and you will get snared.
And these horrid robo-calls telling people that their credit accounts need updating are coming in to our phone once in a while now, I guess they are exempt from the 'Do not call' lists. Or ignore them?
I am tired of all this junk, there was even an article in our local paper about an elderly person getting caught up in one of these phone things.
Also thanks for that link, there sure is plenty of info in this nasty Fanbox thing.
Post by: Xairbusdriver on September 24, 2011, 04:58:59 PM
Bottom line: If you click a link in an email, you and only you are responsible for the consequences. As Nike doesn't say: Just don't do it!
Now, as for the monetary charge, how did they get that info if all you did was click the "launch" button? I assume that it opened your default browser (Safari?). Do you allow Safari to auto-fill forms?!
Or did you also supply that info, yourself?I've seen no proof that mousing over a link has any effect other than the html, client-side action of changing the display. No info is sent to the server by that action, it's simply a CSS property assignment to the hover pseudo element. Of course, if the link is actually hidden in a graphic, your computer has already sent a message to the server to download it and some damage has already occurred; they don't have your financial/personal data but they certainly know your addy is valid and you allow downloading images.
Post by: jcarter on September 24, 2011, 08:05:50 PM
So when I clicked upon that link in the screenshot, it sent me that charge on my iPhone account. I realized that it looked a bit fishy, and deleted the email, and told him about it the next day. He knew that something bad was happening.
I really dont know how my email address came up and how my account got charged, darn glad it was an email address that I dont use often.
And that the charge was easily cleared.
From what I can figure out, I didnt supply any info besides the email address, all I did was click on that button, and then deleted the whole thing. Nothing else came up, nor was anything compromised on my Mac.
This is so nasty! I certainly was fooled and he was too. When you walk down your tiny back road and a friend says that he has uploaded pictures and you get an email that looks like its from him, and you get bombed by Fanbox, which is a name that sounds pretty much like Facebook, it makes us a lot more paranoid about the net and the troubles that lurk.
Thank god we use Macs! And that we have people like you who can explain this insidious stuff and how it works.
I would NEVER EVER use my little Dell on the internet, except for the classroom page and a couple other sites that I know are OK.
Jane
Post by: jcarter on September 24, 2011, 08:16:08 PM
I ordered some flannel shirts from a company named Haband.
And when I saw a link that said "free shipping", I moused over it. But did not click upon it.
Several months later I saw a charge on my credit card account that said "Haband Perks".
I was quite upset, so I Googled it, and yes it had happened to many many other people who had ordered from them and had not used the free shipping, as that link looked odd.
I called my credit card co. and they said I had 'joined a club' by mousing over that free shipping thing.
And they got rid of the charges.
They said NEVER use Haband company on the net, if you wanted to order something from them, use the PHONE only, as they cant slime you if you phone in your order.
So I found on the net info about this company that was the 'CLUB' and they had done this to people who had ordered flowers as well. I took the time and effort to find the phone of Haband company and worked up thru the food chain and told them what they did, and they would never get another order from any of my large family and friends.,
I got a sincere apology and they said that this was a way that they were making money.
I told them that this was a very slimy way to increase their income and their company used to be a great place to order work clothes and inexpensive mens clothing.
They were upset that I had taken the time to pursue this, and said that they would change their ways as they had lost many loyal customers by this 'club' thing.
Sorry for the long post, but I had written this all down when it happened.
Forgot to say, that you probably have hit on the explanation, a hidden graphic under that innocuous free shipping button. It happened to other people too.
Post by: Paddy on September 24, 2011, 08:47:55 PM
Jane, did you receive and look at this message on your iPhone? If so, it looks to me like it's a "short-code message" - and yes, it appears you get charged for those. I still don't understand all the ins and outs of it, but it's clear that Fanbox is a very slimy company!
Post by: jcarter on September 25, 2011, 07:26:16 AM
But it must have triggered this by just being there on the iPhone.
I never got far enough on the Mac to see anything about joining or giving info to Fanbox. When I realized that my friend's email had been compromised, I knew it was fake. He was livid.
Ive never gotten another one thank goodness, so perhaps he was able to get rid of the whole mess.
The link you sent has exactly what happened to him.
He is thinking of getting a Mac this winter and if so, I will hook him up with you people here. He goes to Nigeria, Tajikistan, and Kuala Lumpur on business a lot, so I hope to talk him into getting a Mac before he leaves for the winter. And he wants for me to set up an account on Pbase.com for his pictures, he hates Facebook.
Thank you for the info, he can come over here when he gets home and read the links that youve supplied me with.
Post by: jcarter on September 25, 2011, 07:33:46 AM
This person who sent it, has no clue about computers, she is somebody I met when I was giving away books on our local free-cycle site. I did get a normal email from her way back after I mailed the books to her. So looks like she got scammed by something too, also a PC user. Its not even her correct email.
Let me know if you think this is another thing like Fanbox,
Screenshot,
Post by: Jack W on September 25, 2011, 09:23:41 AM
QUOTE(jcarter @ Sep 25 2011, 08:33 AM) <{POST_SNAPBACK}>
Here is another one, of course I didnt click on anything, just deleted it.
This person who sent it, has no clue about computers, she is somebody I met when I was giving away books on our local free-cycle site. I did get a normal email from her way back after I mailed the books to her. So looks like she got scammed by something too, also a PC user. Its not even her correct email.
Let me know if you think this is another thing like Fanbox,
Screenshot,
If that one isn't, then there's no such thing.This person who sent it, has no clue about computers, she is somebody I met when I was giving away books on our local free-cycle site. I did get a normal email from her way back after I mailed the books to her. So looks like she got scammed by something too, also a PC user. Its not even her correct email.
Let me know if you think this is another thing like Fanbox,
Screenshot,
IMHO
Jack
Post by: Xairbusdriver on September 25, 2011, 04:05:27 PM
But you should always be given such 'codes' (and even a URL) in plain text in that email, also. Then, use your bookmarks to send your browser to the site and look of the place you can use that code. If the company forces you to use an email link, tell them you don't appreciate that lack of respect for your security and will no longer be doing business with them. And let them know you'll be reporting their lack of customer respect to all your friends. Don't put up with being abused by companies that don't care about your security.
However, when you can read the thing and plainly see a reference to a completely different web site (http://work22home.net/esub/bizopp_mainphp), why on God's green earth would anyone click it, EVEN IF IT WAS NOT IN AN EMAIL?!!!
Just stop clicking on email links. Anywhere. Never do it. Period. Please... 
Nor do I believe that simply seeing a list of emails on an iPhone will do anything. Viewing the actual message, even a part of it, WILL download any graphics, visible or not, of course. That will send a message back to the server, just like it does on an email app on any computer. On the iPhone, there is a "Load Remote Images" switch in the "Mail, Contacts, Calendar" settings. That should be turned OFF. It will not only prevent these messages being sent back but it will increase battery life! Do it. Now!
Post by: jcarter on September 25, 2011, 07:46:06 PM
Except for that mouseover thing with the Haband company last year, that was really slimy.
Its very interesting to look at the code and see how you have explained how this tricky stuff works. Im not great at code yet, but I am learning.
I do already have "Load Remote Images" turned off on the iPhone.
Ive not had a problem with a company sending troublesome email links. Like you say, I have the companies I do business with all in my bookmarks, like LLBean and more.
No trouble with those great companies.
I get sales info in emails from Cabelas and Lands End, and a few others, but not a single problem with any of them.
Jane
Post by: kcourt on September 26, 2011, 11:00:51 PM
Well, I got caught too. The fanbox I received was from a friend who was in England for a year. She said she was sending some photos, so when I got it, I didn't think twice and clicked on "launch". I didn't give any name, etc. but I suppose I will have a charge also.Funny thing is I know better. It happened so fast. I learned my lesson.
Kathy
Post by: jcarter on September 27, 2011, 06:59:19 AM
Fanbox had his name and email and some mutual friends correctly, so I thought it was legit.
Post by: Xairbusdriver on September 27, 2011, 01:40:18 PM
"Sending...photos" is not the same as "sending you a link to view a gallery somewhere." Assuming she even sent the message with the link. Even if she did, the link can show you where it really goes. "Plain text view" is your friend, don't ignore it!
- Rule 1. Don't assume anything is from who you think it is.
Rule 2. Don't click on any email links you didn't create yourself.
Post by: jcarter on September 27, 2011, 07:19:07 PM
Post by: Paddy on September 27, 2011, 09:00:11 PM
Pretty scary - it just goes on and on.
http://www.ellenroseman.com/?p=591
Ellen is a consumer advocate/columnist at the Toronto Star. She's been phenomenally successful at helping people who write to her with unresolved consumer complaints, but on this issue, it would appear that Rogers and Bell aren't listening. I'd be interested to know what the situation is in the US re: third party charges. In your case, Jane, AT&T reversed the charges - even though they themselves didn't make them. The Canadian cell phone companies do not seem to show the same willingness to help the beleaguered customer.
Post by: kcourt on September 27, 2011, 10:50:06 PM
I opened it on the computer so I guess the E-mail will start coming. So far, though, nothing, and I received it about 6 days ago.I have a neighbor who has been receiving calls from some guy in Nigeria asking for money, of course. She never puts anything on her computer or phone, but he got her phone number, her name, her nickname, her age, etc. He calls most every day and neither the phone company nor the police will do anything. She has disconnected her answering machine and changed her phone number to an unlisted number, but he still keeps calling.
No more privacy anywhere...ugh!
Kathy
Post by: jcarter on September 28, 2011, 07:14:13 AM
Glad AT&T was able to fix mine.
I see that this was only on the email for my iPhone, and see that the people on Ellen's site have given their cell phone # out.
I have never ever given my cell phone number out to anybody besides friends and family. I have never entered it on any website. The only text messages I get are from family and an occasional one from AT&T telling me that there is an update or something legit.
Guess I was lucky so far, though I do remember way back, someone here had a warning about this problem.
Post by: jchuzi on September 28, 2011, 07:27:57 AM