Linux Mint Website Hacked /ISO's compromised

[michael diemer]

I got an invite recently from Linkedin, allegedly from an old friend. My tin-foil protector (i.e. paranoia) fortunately kept me from responding until I Duck-Ducked (i.e. googled) the issue, and discovered that often when this happens it's not even from the person, but from Linked in itself. My friend has my email, so he can contact me that way. He hasn't, so I figure it was bogus. This one incident was enough to turn me off completely to Linkedin.

 

[z3r010]

It have something to do with the level of activity as well as how you have things configured. Here despite having it I am not running a business or other type of situation where I would generally see any activity on with it. Someone at the opposite end of the state even had an opening for a IT tech he was trying to fill that wasn't going to happen while he had suggested that at the time.

The emails that started coming in too often were much like Facebook's "People you may know" after typically seen in the right column there however after adding any new friends in or simply being in any social groups. Not being in the profession where I have the need for being promoted that actually served no purpose here anyways! While you wouldn't be apt to see any security risk as far as your system being exposed your personal information is out there on the web however being another concern entirely.

It does make me chuckle though when I endorse Joan Archer for MySQL management or MS Exchange admin rather than needlecraft & Crochet

 

[z3r010]

I got an invite recently from Linkedin, allegedly from an old friend. My tin-foil protector (i.e. paranoia) fortunately kept me from responding until I Duck-Ducked (i.e. googled) the issue, and discovered that often when this happens it's not even from the person, but from Linked in itself. My friend has my email, so he can contact me that way. He hasn't, so I figure it was bogus. This one incident was enough to turn me off completely to Linkedin.

What probably happened is his tinfoil hat wasn't on properly and he missed the bit when linkedin asks to access your address book - rookie error.. and it emailed all his friends like you to join.

 

[Night Hawk]

Well now you are getting close to the base there! michael diemer

However, the message is not from LinkedIn. All of the links in the message lead to compromised websites that have no connection to LinkedIn.

Omniquad Security Research Labs found that the endpoint URL contains a criminal toolkit known as the BlackHole Exploit Kit. BlackHole is a web application used by criminals to exploit browser vulnerabilities as a means of downloading and installing Trojans and other types of malicious software into victim’s computer.

Line Drive Home Run on being suspicious of bogus emails as I was when deciding too many was too suspicious since I rarely even see anything from Facebook where a newsletter or some type of notice would more likely come from and still hasn't. The security blog can be read in full at: LinkedIn Phishing Emails – How to distinguish between a Phish and a Legitimate Email – Omniquad Security Blog

 

[meebers]

I got an email today from LinuxMint advising me to change my password. Used my own link instead of the one from the email....

 

[Night Hawk]

I'm not even registered over there so not any problem while anyone else besides you should! If you have an old email address you no longer use it might another suggestion to see that applied onto the account or ask them to close it up for you since the site was breached. I doubt you want to be part of the statistics!

 

[mjf]

I got an invite recently from Linkedin, allegedly from an old friend. My tin-foil protector (i.e. paranoia) fortunately kept me from responding until I Duck-Ducked (i.e. googled) the issue, and discovered that often when this happens it's not even from the person, but from Linked in itself. My friend has my email, so he can contact me that way. He hasn't, so I figure it was bogus. This one incident was enough to turn me off completely to Linkedin.

What probably happened is his tinfoil hat wasn't on properly and he missed the bit when linkedin asks to access your address book - rookie error.. and it emailed all his friends like you to join.

The Linkedin access to your address book is a very contentious issue and I don't think it's a Rookie issue in all cases. Many people have complained about Linkedin accessing their address book when they carefully did not accept any suggestion of access. There may be a one of access to your address book when you enroll that is not clearly identified.

This is a major weakness of Linkedin which has made it touch & go if I would drop Linkedin.

Here are a couple of questions of more general interest:
1) If you inadvertently allow access to say your address book, how in technical terms does the address book get accessed.
2) How do you stop this access. Many Linkedin subscribers have tried many suggestions to no avail.

I know - off main topic.

 

[Night Hawk]

That's an easy one! There's an Outlook connector as well as a GMail connector that allows you to "share contacts" as well as some sites instructing on how to see it removed! One blog explains why you shouldn't even allow access to an exchange server! How (and Why) to Block LinkedIn from Accessing Exchange Servers

For other blogs as well as a growing number of spamming as well as seeing Link a dink accessing passwords as well as other data off MS exchange type servers, etc. the Bing results are a bit of an eye catcher! prevent linkedin from accessing contacts - Bing

 

[meebers]

I'm not even registered over there so not any problem while anyone else besides you should! If you have an old email address you no longer use it might another suggestion to see that applied onto the account or ask them to close it up for you since the site was breached. I doubt you want to be part of the statistics!

I use a "free" throw away email address with an "aka" name. I might have a name of Bob but use Bobb and then sit back and get spam addressed to Bobb knowing that they promised not to share your name etc. pants on fire!

 

[GEWB]

I must have my linkedin set up different to you guys because I don't get any of the stuff you describe.

Ditto - no issues. I get maybe one email per week and they are legit.

Regards,
GEWB

 

[Arc]

Nobody other than the user can access his address book. Linkedin (and many others, Shelfari as an example) wants the user to access their address book for them.

One may skip it.

​

Or one may continue accepting it.

If I accept, I should not complain.

If one option comes in front of me, and I neglect, latter I complain for the same, I am rookie.

 

[Barman58]

With me it was similar to my issues with Facebook, not so much the website but the android app. The emails were mostly from LinkedIn themselves, rather than other users. I purposely stopped emails from others, just for LinkedIn to flood my inbox themselves

 

[mjf]

Nobody other than the user can access his address book. Linkedin (and many others, Shelfari as an example) wants the user to access their address book for them.

One may skip it.

View attachment 382745
​

Or one may continue accepting it.

If I accept, I should not complain.

If one option comes in front of me, and I neglect, latter I complain for the same, I am rookie.

I'm quite cautious when accepting options and I definitely don't recall this option when I joined Linkedin or subsequently.
Here is one thread of complaints. Maybe they all slipped up - I doubt it.
How did LinkedIn get my address book info without authorization? - LinkedIn Help Center
Once they have a snapshot of your address book there appears to be no way to get it deleted.
Of course you can always cancel your Linkedin account.

 

[lehnerus2000]

One may skip it.

View attachment 382745
​

I "love" how the MOST IMPORTANT information is displayed using the smallest font.

I'd label that picture as ethically dubious (i.e. they are obviously counting on people "ignoring" the small font info).

Of course you can always cancel your Linkedin account.

Does that stop them from using the data they've already collated?

 

[meebers]

I must have my linkedin set up different to you guys because I don't get any of the stuff you describe.

Ditto - no issues. I get maybe one email per week and they are legit.

Regards,
GEWB

I kept getting a linkedin invite from my neighbor and after a while I confronted him and said knock it off. He of course did not know this was happening, must have stole his address book. I don't have an account with them.

 

[Night Hawk]

With me it was similar to my issues with Facebook, not so much the website but the android app. The emails were mostly from LinkedIn themselves, rather than other users. I purposely stopped emails from others, just for LinkedIn to flood my inbox themselves

I would dump the Android app in a heart beat if you have it traced back to that! Of course I also ignore mobile apps for the av software as well as the ISP and Amazon as well. As for Facebook however I rarely seen anything but some announcement every so many months about some change like a new feature or some other notice.

Nobody other than the user can access his address book. Linkedin (and many others, Shelfari as an example) wants the user to access their address book for them.

One may skip it.

View attachment 382745
​

Or one may continue accepting it.

If I accept, I should not complain.

If one option comes in front of me, and I neglect, latter I complain for the same, I am rookie.

I'm quite cautious when accepting options and I definitely don't recall this option when I joined Linkedin or subsequently.
Here is one thread of complaints. Maybe they all slipped up - I doubt it.
How did LinkedIn get my address book info without authorization? - LinkedIn Help Center
Once they have a snapshot of your address book there appears to be no way to get it deleted.
Of course you can always cancel your Linkedin account.

I would tend to be cautious as well and when seeing emails coming in about people I wouldn't even know existed unless on some contact's own address book I simply canceled that account in a flash. I was also finding I actually had no use for that service anyways and not any tough decision to make.

One may skip it.

View attachment 382745
​

I "love" how the MOST IMPORTANT information is displayed using the smallest font.

I'd label that picture as ethically dubious (i.e. they are obviously counting on people "ignoring" the small font info).

Of course you can always cancel your Linkedin account.

Does that stop them from using the data they've already collated?

Does it stop any service or marketing agency ever? Once your information is out there is open season on you! Even with MS I signed out for their spam tracking where you take a look at any new junk mail the filtering catches and click on either the Junk or Not Junk option. Junk mail that gets filtered while only about 2% of the total incoming then sees the sender supposedly blocked as well as the junk mail deleted. Yet I continue to block bombardments from @some random number dot live.uk and have to wonder if that isn't some MS gimic to make it look like... some other source? I can go back into the old WLMail account and whamo 5 or 6 more accumulated in no time! All seeing the @ ___dot live.uk on about 90% of what comes in.

Think that's bad? Wait until you get a look at the free account for the ISP! That will scare you off! Tons after tons where I never bother to even look any more. An active account will tend to get more junk mail in then one that looks abandoned!

 

[Barman58]

I have my own way of dealing with spam generated by companies I actually want to deal with, (the spam generated because you gave your email address to access some program or service), First, I obviously, use a secondary eMail account, but in addition I add a rule to the inbox to cover each company.

These are set to bypass the inbox and, depending on the "importance" of the company to me, (how likely I would actually be interested in their sales promotions etc), it is set to Mark as Read and then either Move to ... (a specific folder), or Delete

This has an advantage in keeping my inbox clean, not providing data to any company that monitors bounceback or other feedback that a mark as spam could cause, and still lets me read at a later date at my convenience those mails that I may have an interest in

 

[Night Hawk]

With most accounts I will simply set things to the highest Exclusive from contacts option and let the garbage head for the dumpster. I was finding trying to set up rules wouldn't work due to how the senders were randomizing things. Key words being used didn't help either. That is with the remaining Windows Live Hotmail accounts note! For the ISP account there are no block or filter options but a rather useless report spam by forwarding the email dunce deal!

As for the incoming mail from here I use a provider that filters almost 100% spam but is located in Australia! Fastmail.fm where very few mostly US generate spam at that from ordering from a main shopping with plenty of vendors no less or some other shopping site where often lists of email addresses are sold! Confidential addresses however rarely see much of anything except for the provider's since those are posed as DOA accounts to prevent detection of activity.

 

[Barman58]

The filters are now in the Main GMail account and seem to catch most stuff based on the sender details, so no real need for word searches if needed I can always set up a filter in Thunderbird that's more specific than my GMail ones, The great advantage of IMAP is that you can do the folder shuffle at source or locally and it shows the same in all devices when you get round to read things

 

[z3r010]

I've got mine set up the same as yours with the filters etc.