开云体育

I am a IO Group owner. I have started receiving scam emails which are disguised as coming from members. I have two Moderators that also received them. The emails do not appear on the message board or in the activity log.
The Moderators were changed to not receive emails of owner notifications and they no longer receive the scams.
Any ideas how the scammer is getting in?

Mick

On 9/8/2020 18:22, Mick Anderson wrote:

I am a IO Group owner. I have started receiving scam emails which are disguised as coming from members. I have two Moderators that also received them. The emails do not appear on the message board or in the activity log.
The Moderators were changed to not receive emails of owner notifications and they no longer receive the scams.
Any ideas how the scammer is getting in?

Mick

Without seeing the full headers, which I encourage you to send along, I would guess that they are going to an admin email.? Does the To: field look something like "main+<role>@<yourgroupname>.groups.io" ?

E.g., in the case of one of my groups, an email to the owner looks like: [email protected] .

Best,

Glenn

--
This email has been checked for viruses by Avast antivirus software.

On Tue, Sep 8, 2020 at 09:23 PM, Mick Anderson wrote:

I am a IO Group owner. I have started receiving scam emails which are disguised as coming from members. I have two Moderators that also received them. The emails do not appear on the message board or in the activity log.

Mike -- Sounds like these were sent to the +owner address. See?/helpcenter/ownersmanual/1/sending-and-receiving-group-owner-email-messages?

In what sense were they "disguised" as coming from members?

The Moderators were changed to not receive emails of owner notifications and they no longer receive the scams.
Any ideas how the scammer is getting in?

Anyone can post to the +owner address, even those without any groups.io account. All you can control is who receives them.

If you wish to restrict messages you receive to those who have "gotten in" (aka your group members), go to Subscription>Owner Email and select "Members Only." Failing that, I'm afraid you'll just have to put up with occasionally receiving an email from a troublemaker.

Regards,
Bruce

---

Check out the groups.io Help Center?and?groups.io Owners Manual

Hi, along those same lines - In our Activity log I see that two days ago this occurred:
"Non-member @yahoo.com attempted to send message "Technical Glitch" via email"? ?(I replaced the name with asterisks in this post)
We did have a message thread just before this that had "Technical Glitch" as the subject line, but we have no idea who this "non-member" is.? Am I assuming correctly that this was some spam that was blocked from actually reaching members via emails and/or the message board?

Thanks!

I just now received this:

...........begin............

On Wed, Sep 9, 2020 at 10:02 PM, TeresaQ wrote:

I just now received this:

<snip>

I don't know if the member injected that and then sent it to me, or if that is how the member received it.

Pretty sure here that Juno itself inserts those ads in outgoing mail.

See??for instructions on how this person *might* be able to turn them off.

Regards,
Bruce

On Wed, Sep 9, 2020 at 08:59 PM, Maureen wrote:

"Non-member @yahoo.com attempted to send message "Technical Glitch" via email"? ?(I replaced the name with asterisks in this post)
We did have a message thread just before this that had "Technical Glitch" as the subject line, but we have no idea who this "non-member" is.?

Maureen -- This happens anytime a message arrives at the group address from an email address that is not recognized.?

Am I assuming correctly that this was some spam that was blocked from actually reaching members via emails and/or the message board?

Well, it was certainly blocked. Whether the message would meet anyone's definition of "spam" is another matter.?

I suppose if your message archive is public, it's possible that a spammer may have read the existing thread online and then attempted to send another message with the same subject line, hoping it would go through. But in my experience spammers are neither that sophisticated, nor do they have that much time on their hands.

The most likely scenario is that someone who *is* subscribed to your group attempted to send a response to the existing thread using an email address that's not subscribed. This is becoming more and more common, as just about everybody has more than one email address these days. A message posted to the group could also have been CC-ed to someone who is not subscribed. If that recipient does a "reply all," then the copy that comes back to your group gets unceremoniously dumped.

With some thought I'm sure we can come up with other such scenarios...most of them fairly benign.

Hope this helps,
Bruce

---

Check out the groups.io Help Center?and?groups.io Owners Manual

Bruce,

Yes, Juno and Netzero (United Online) inserts ads at the bottom of each and every email sent out.? It was really bad a few years ago.? Today, the ads are now a news feed service called NEWSY.?

It's one reason I ONLY respond to my group by logging in to GIO and NOT replying via email to the group.

BMaverick
?

On Wed, Sep 9, 2020 at 02:23 AM, Mick Anderson wrote:

I have started receiving scam emails which are disguised as coming from members. I have two Moderators that also received them. The emails do not appear on the message board or in the activity log. The Moderators were changed to not receive emails of owner notifications and they no longer receive the scams.

N.B. My underlining above.

I suddenly realised that you started this topic on the same day that you posted on beta, although I have no idea of their respective posting times. Given the way that this latter point was resolved on beta would I be right in thinking that the assertion The emails do not appear on the message board or in the activity log was / is probably incorrect?

I suspect that these rogue messages were spam rather than scam, but that is a minor perhaps semantic point.

FWIW (attempted) group messages sent by non - members are also recorded in Activity as Non - member message. Where a group does not permit non - members to post they just sit there as a record; where a group does allow non - members to post they are forwarded for moderation in the usual way.

As an aside the group I moderate has had 24 spam attempts since the beginning of the month; it is also quite common to find attempted messages from members who have sent their contribution from a "wrong" (i.e. unregistered) email address.

Anyway in your case (as others have pointed out) the spam was being sent to the all - too - public "+owner" email address, and they will be in the Activity log if you search for them.

Chris