Protonmail warning message

aenima1336 said:
@Mushy

I've never had contact with olart in any way, though I got the scam mails. After this, I've made myself a new account and only informed one vend from here and got the same mails again. 

So I guess this has to be someone of "us" who has access to the vendor threads and email-addresses, no? But wow and especially 'why' the person is doing this is another question. 

But I think it actually is deeper than we think.
Click to expand...
You mean different emails you got the standard phjishing emails to get your login so did i. But people have been getting fake btc wallet addresses in email chains from suppliers

 
I can't edit my suggestion post above, but obviously always update your computer/phone and browser and do not run a operating system that doesn't have current updates/security patches available for it.  That ESPECIALLY goes for all you PC users both because they are infinitely more vulnerable and also seeing as Windows 7 just got obsoleted....

Apparently this method of attack by compromising a machine and then inserting replies in pre-existing email threads is quite common:

https://www.cyberscoop.com/hacking-hijack-palo-alto-networks-spearphishing/

https://www.zdnet.com/article/this-sneaky-phishing-attack-hijacks-your-chats-to-spread-malware/

https://healthitsecurity.com/news/emotet-trojan-resurfaces-hijacking-email-content-from-victims

 
Last edited by a moderator:
Mushy said:
The domain olatpharrna does not exist. So its clearly a spoofed email. Have you got the headers for that email?

What does the reply to header say?
Click to expand...
I have the full headers to all the phishing emails I received, can post to pastebin or where ever you like. If you can DM me that's fine too.
TL;DR is that the return path for all are protonmail addresses.

 
Last edited:
Looks like Protonmail finally got around to sending out a "Your email was part of a phishing attack" email!!  Link to their blog posting about preventing phishing attacks: Prevention.

 
With any end-to-end encrypted email service you have to accept that security can't be as robust as commercial email services. For example, Gmail logs the shit out of everything you do, including every IP address you use plus every device and browser. This way they can warn you if your account is accessed from a new device or a suspicious IP address. ProtonMail and other end-to-end encrypted email services don't do this, and rightfully so. Anonymity is a bigger priority, so they log as little about you as possible making phishing attacks much more difficult to detect. As long as you have the correct username and password, nothing else matters. They can't check and warn you if your account is logged in from a new device or a suspicious IP because they don't log that stuff in the first place, it's a compromise you just have to accept for wanting to remain anonymous. However, 2FA is something that, IMO, ProtonMail should enable by default on all accounts. It would have prevented all the recent phishing attacks and in-keeping with anonymity, ProtonMail don't require a mobile phone number, they use third party 2FA apps like Authy or Google Authenticator to generate 2FA codes. It's essential that anyone using end-to-end encrypted email also use 2FA, ProtonMail or otherwise. 

 
delawaredrew said:
I have the full headers to all the phishing emails I received, can post to pastebin or where ever you like. If you can DM me that's fine too.
TL;DR is that the return path for all are protonmail addresses.
Click to expand...
It depends i dont need the headers for the phishing emails its more the enail in the screeshot above where the scammer seems to jump into the middle of an email chain with his own spoofed email that interested me

 
sweetmelissa589 said:
@tellme   Is this really true?  I never heard of the p0lic3 being able to spy on prot0n and tut@nota?
Click to expand...
There's no legal requirement for companies operating under a MLAT to comply with a government agency to create a backdoor in an end-to-end encrypted service. Rumours of open source platforms (which both ProtonMail and Tutanota are) installing secret backdoor's are just that, rumours.

 
milex said:
There's no legal requirement for companies operating under a MLAT to comply with a government agency to create a backdoor in an end-to-end encrypted service. Rumours of open source platforms (which both ProtonMail and Tutanota are) installing secret backdoor's are just that, rumours.
Click to expand...
No. A German court forced Tutanota to providing a back door for authorities, as explained in this (unfurtunately German) news artice: https://www.sueddeutsche.de/digital/tutanota-verschluesselung-e-mail-ueberwachung-polizei-1.4676988

You a right that Switzerland handles this differently. No backdoors but ProtonMail is forced to provide police with mail box content of users if demanded  by a court. Also, ProtonMail are obliged to provide police real-time access to mailboxes if a court demands it.

MLAT means that a foreign country can ask for that and that a Swiss court will approve that. See ProtonMails trsparency report, it proves that Switzerland has become a cooperative country: https://protonmail.com/blog/transparency-report/

Legisltion in Iceland still values privacy and is be the best place for anonymous mail and web hosting, To give an example: Iceland did not sign any MLAT treatiy, and while e.g. Tutanota must keep deleted emails stored for six months, in Iceland, if an email was deleted, it is immediately gone.

The times, they are changing...

 
Last edited:
Wow, just wow. So bout 2 weeks ago after a sketch back n forth with eu i preempteviley deleted permanently my prtnmail and simultanously my device gave up the ghost so was not on here ... fast fwd to now having magazine show up and vendor apparently gone ... gonna have to consider myself somewhat burned even though it came through and a bit uneasy about diving into the reading materials without independent testing... luckily i think i am all set for a while and can wait for testing 

Tl;dr went away and came back to this shitstorm ... damn

 
Last edited by a moderator:
HEY GUYS - -Either my HPPD has finally driven me psychotic, or I just had a couple of emails from the scammer pretending to be a vendor I had contacted!
 

I posted in the respective vendor’s thread, but he’s in the private section so I will post here too. In the morning, I will give the details on what made me think it’s the scammer, but the main part is the language style didn’t match. 

 
Scammer is at it again

Received email 'lockandload"

Pretending to be a reputable vendor here

Beware!

 
bud said:
Scammer is at it again

Received email 'lockandload"

Pretending to be a reputable vendor here

Beware!
Click to expand...
likewise, just came here to post this exact same thing. also received a second one from "support team" wanting to verify a phone number that obviously isn't mine. stay safe out there.

 
Mushy said:
I got another scam email too from olart but with a fake email and a confirm my number email
Click to expand...
I have a feeling this is gonna go on for awhile so everyone make sure you dot your i's and cross your t's when dealing with any vendor .Myself I deleted my proton email and started fresh with a new one .I am using this one as a test email to see if I get any open scams from vendors here .I am going to start to contact everyone to try and find out who is compromised. I started a new proton because my old one did get compromised.

Stay safe everyone

 
You must log in or register to reply here.
Drugbuyersguide Shoutbox
  1. st1ckyf1ng4z @ st1ckyf1ng4z: @MrFuszy broo big dawg chill out on posting shit like that on here you’re gonna catch a ban or even worse. be mindful of mentioning others’ names as well. be smarter
  2. L @ Layne_Cobain: @maoi thanks for the input tho I think I’d def go the route of using hcg if I do go w TrT
  3. L @ Layne_Cobain: @maoi nah no fear of needles and if it made me feel a lot better no fear of being on it long term as who knows if my t will even rebound after 5 years on methadone not sure if that’s the norm I hope so…the more I research the more it seems like the best choice is to just go for it with TrT rather than trying to “middle” with Enclomiphene especially now that i know it probably won’t work being on methadone altho I am tapering off 5 mg biweekly so that’ll take a while I’m at 95 now from 120
  4. moai @ moai: @Layne_Cobain the longer you’re on it without using HCG sometimes, (meaning years) the harder it will be to rebound if you do come off. But I’m with you, at only 22, I’ve abused myself to the point I may NEED trt. Not to mention all of the benefits
  5. moai @ moai: @Layne_Cobain You don’t seem it, but if you are the type that’s afraid of needles for life, don’t sweat it. I’m natty atm, but from what I hear A) you won’t want to come off and B) if you implement HCG every once in a while to your protocol, you have a better chance of being able to come off T completely and restore all (or most) of your natty production. Of course, no guarantees and it is dependent on the individual, genetics, compounds and duration of exposure, etc.
  6. L @ Layne_Cobain: @tiquanunderwood when you began the Enclomiphene, were you already off opiates? Cause after further research I don’t think it’ll even work while still on methadone…I think trt with hcg to preserve fertility and ball size is the way to go for me. I just wanna feel better. Thanks for your input on the matter btw
  7. aarons @ aarons: buddy lay that cr@ck pipe down, the weekend barely started
  8. Gulp2788 @ Gulp2788: what an odyssey of shoutbox madness! I love it
  9. L @ luquitoad: Hahahahaj
  10. L @ Layne_Cobain: I’ll have whatever this crazy sonofabitch is having 🥂
  11. MrFuszy @ MrFuszy: I was pissed off though! Someone pulled a pistol on me so i was gona show him how much of a hoe i was by getting him out that house
  12. MrFuszy @ MrFuszy: Oh i actually still have the Police report on file somewherez you can see the tractor marks wjhere I just took out the fence and whatnot
  13. MrFuszy @ MrFuszy: And the cops or the judge were halpy sbout that.
  14. MrFuszy @ MrFuszy: I texted her and was ummm so i might have had a ooopsie but ij RL and like i know its been like ocer a year but it wasn't cuz i hated you or anything it was because i stole a skytrack forklift and demolished a house and hig 14 cars and knocked down a churches fence
  15. MrFuszy @ MrFuszy: Oh in mote news no one cares about, I finally talked to m6 chick who I said nothing too im 14months when i got locked up
  16. MrFuszy @ MrFuszy: Roughly 300, maybe more like 260 now
  17. MrFuszy @ MrFuszy: Lighters, 300 bars a melted snicks and hugging a bong
  18. MrFuszy @ MrFuszy: You know you got fucked up wnen you wake up check your pockets and have 7li
  19. MrFuszy @ MrFuszy: Bro make it a triple ahot
  20. MrFuszy @ MrFuszy: Taqilla never silvers!
Back
Top