Fake Orkut page stole your password (see-my-new-pic.awardspace.biz, aprendendoaqui.com.br)

Did u suddenly notice that your "about me" in ur orkut profile suddenly changed to spam ?

And also your webpage ! Did it change to something like this ? http://www.aprendendoaqui.com.br

Then U fell for a Phishing Scam !

Link to this article : http://johndasfundas.blogspot.com/2009/08/fake-orkut-page-stole-your-password.html

Phishing means using a fake email or website to fool someone into giving up his/her personal information or username and password.

Orkut is a social networking site very popular in India and Brazil and somewhat popular in the rest of the world, mostly because is now a Google brand.
This particular Orkut phishing used a fake orkut website hosted at a free webserver (so that they did not have to spend any money, and more importantly so that they cannot be traced )

They host it at http://see-my-new-pic.awardspace.biz/ (DONT go to the link !! Atleast don't give ur password there !!)
http://johndasfundas.blogspot.com/2009/08/fake-orkut-page-stole-your-password.html

The links they put in your profile "about me :" are like this :

!! HI GUYS , DO YOU LIKE SEX AND WANT TO MEET SEXY HOT PORNSTARS, AND FUCK THEM? !!
!! THEN CHECK OUT THESE NEW UPDATES DONE BY ORKUT FOR SOME SPECIAL PEOPLE



GO HERE TO VIEW WEBCAM OF HOT MODELS

GO HERE TO SEE NUDE PICS AND VIDEOS OF HOT MODELS

0FFICIAL ORKUT SEX CHAT ROOM BY GOOGLE

COME HERE TO SEE HOT MODELS NAKED AND NUDE

COME HERE TO GET A CHANCE TO MEET SEXY PORNSTARS

GO HERE TO GET PHONE NUMBER OF HOT MODELS

GET PHONE NUMBERS OF OTHER MUMBAI MODELS

COME HERE TO GET A GOLDEN CHANCE OF DATING PRIYANKA CHOPRA

LATEST PORN AND XXX MOVIES FOR YOUR MOBILE PHONES RECENT DELHI MMS CLIPS AND ALL THE RECENT FUCKS

G0 HERE T0 MEET H0T AND SEXY GIRLS IN MUMBAI

GET A CHANCE TO FUCK HOT MODELS IN YOUR HOUSE


SEX CHAT ROOM



CONDITIONS APPLY
2009 GOOGLE/ORKUT

Its obviously porn spam, and if u click on it, it takes u to a fake orkut page at http://see-my-new-pic.awardspace.biz/

http://johndasfundas.blogspot.com/2009/08/fake-orkut-page-stole-your-password.html

This is in addition to the "webpage:" being changed to http://www.aprendendoaqui.com.br

The second one has been disabled, probably by the appropriate authorities, but the fake page at AwardSpace free hosting is still working as I write this article.

Hope AwardSpace disables the fake site and catches the culprits. Hopefully they can trace the IP address from where it was programmed and set up.

http://johndasfundas.blogspot.com/2009/08/fake-orkut-page-stole-your-password.html

This is probably the free plan of awardspace that they used :

Easy Starter Hosting Plan with 200 MB free space and 5GB/month bandwidth, they can get quite a number of phish from orkut.

And they have cleverly hotlinked the images from the real orkut site, meaning they reduce their bandwidth load and leech it from the real orkut !!!!



Q. What should I do if I am affected by http://see-my-new-pic.awardspace.biz scam ?

First of all "DONT PANIC !"
Then, as soon as possible, Change your Password.
If you are able to change your password, very good !
http://johndasfundas.blogspot.com/2009/08/fake-orkut-page-stole-your-password.html

Q. How do I change my orkut password ?

From here https://www.google.com/accounts/ManageAccount

The option is hidden in the settings, which is on the left side of ur orkut page.

Its on your Orkut Home page ( http://www.orkut.co.in/Main#Home.aspx )

http://johndasfundas.blogspot.com/2009/08/fake-orkut-page-stole-your-password.html

On the left side, just above the "invite friends" box, between updates and spam.
Once you click and go to the settings, and scroll to the bottom in "general" tab.
Look for this "to change your password, visit your Google Account Settings "
This is what u want https://www.google.com/accounts/ManageAccount?hl=en-US

Q. What next after changing password ?

Well, if ur profile has been edited and filled with porn links, u might want to remove it !
Go to ur profile page ( http://www.orkut.co.in/Main#Profile.aspx )
Click the "Edit" button for the "about me:" and change it back.

After that, click "View full Profile" (at the bottom)
Scroll to "webpage:" and click the "Edit" button and change ur website ( to http://www.fundazone.com if u want to promote my website)

And u are done !
Don't forget to inform your friends about this fake orkut website. Especially the person in whose profile u accidentally clicked the link.
And better to put it in your scrapbook and even status message for a few days.

Link to this site for the removal instructions.
http://johndasfundas.blogspot.com/2009/08/fake-orkut-page-stole-your-password.html




Hope this has helped someone. I din't think I'll waste so much time in writing this blog post.



EDIT :

A variant puts the following message in the "about me:" Same cure as above.

CHECK MY NUDE PICTURES
http://mysecretpics.blogspot.com

( Redirects to http://mysecretpics.awardspace.biz/ )

ALL SKINS POWERED BY
2009 GOOGLE/ORKUT

When will they stop ?

Update :
Is this part of a botnet ?

Here's a list of domains and IP's many are Reported as attack sites.

Rate RED; these have been verified as currently active

Malicious content
Alliance and Leicester phishing botnet
re: http://hphosts.blogspot.com/2009/07/is-your-computer-part-of-alliance-and.html

219.83.125.242
2nd6xui4f.com
68.112.21.204
68.54.210.173
69.250.79.6
74.210.187.149
75.199.109.38
76.115.11.52
79.78.196.168
88.185.146.240
97.90.152.194
alliance-leicester084.com
alliance-leicester184.com
alliance-leicester314.com
alliance-leicester406.com
alliance-leicester450.com
alliance-leicester950.com
finalhookspot.com
justhookupnow.com
my-secret-pics.com
mybank.alliance-leicester084.com
mybank.alliance-leicester184.com
mybank.alliance-leicester314.com
ns1.besthingdomainname.com
ns2.besthingdomainname.com
ns3.besthingdomainname.com
ns4.besthingdomainname.com
ns5.besthingdomainname.com
ns6.besthingdomainname.com
pictures-plug.com
pictures-switch.com
pictures-utube.com
secret-digital-pictures.com
stolen-pictures.com
stolen-shots.com

I previously rated this back in May 2009 from this DNS-BH blog post

my-cheerful-dns.com
ns1.my-cheerful-dns.com
ns2.my-cheerful-dns.com
ns3.my-cheerful-dns.com
ns4.my-cheerful-dns.com

currently parked, but IMO it's best to catch it before it's a problem

citiaccountservices.com

Here's a "kicker"
This domain's DNS does not resolve, though it previously listed name servers do.
whois

Created: 2009-06-05
Expires: 2010-06-05
Updated: 2009-07-03
Registrant:
Organization : cheng wu
Name yang jing zhong
Address wuhan
City wuhanshi
Province/State : hubeisheng
Country china
Postal Code 430000
Domain Status:On-hold (generic)

besthingdomainname.com

Update :

Orkut now gives a warning when accessing such profiles :

Warning
The profile you wish to access may contain content that could be inappropriate for some users. Learn more » If you would like to view the profile anyway, click proceed below.

Update :
They have started changing the orkut status message like other orkut worms used to do.
This will increase the rate of spread of this drastically.

CHECK MY NUDE PICTURES : mysecretpics.blogspot .com (remove spaces)

BOOTMGR is missing, Press Ctrl+Alt+Del to restart

Find yourself receiving "BOOTMGR is missing, Press Ctrl+Alt+Del to restart" message? Don't stress! Its easier to fix than you think. Here's how:

SOLUTION 1

- Get your Vista installation DVD and pop it into your drive.
- Then restart your computer.
- Set your computer to boot from DVD or CD in your BIOS.

Vista will ask you for language and keyboard layout information, after which you will be asked if you want to re-install Vista or repair your existing installation.
Select Repair. After which Vista's System Recovery Tool will start.



Select Startup Repair and let Vista do its thing! That really is all there is to it!


If that doesn't work try this:


SOLUTION 2

If the previous method does not resolve the problem, you can rebuild the BCD store by using the Bootrec.exe tool in the Windows Recovery Environment. To do this, follow these steps:

- Get your Vista installation DVD and pop it into your drive.
- Then restart your computer.
- Press a key when you are prompted.
- Select a language, a time, a currency, and a keyboard or another input method, and then clickNext
- Click Repair your computer
- Click the operating system that you want to repair, and then click Next
- In the System Recovery Options dialog box, click Command Prompt
- Type bootrec /rebuildbcd and then press ENTER

• If Bootrec runs successfully, it will present you with the installation path of a Windows directory. To add the entry to the BCD store, type Yes . A confirmation message appears that indicates the entry was added successfully.

• If Bootrec cannot locate any missing Windows installations, you must remove the BCD store, and then you must re-create it. To do this, type the following commands in the order shown below: (Remember to press ENTER after each command)

bcdedit /export C:\BCD_Backup

ren c:\boot\bcd bcd.old

bootrec /rebuildbcd

- Restart the computer.

India launches a tiny indigenous nuclear submarine

Indian Prime Minister Manmohan Singh launched the country's first locally built nuclear-powered submarine on Sunday, 26th of July, 2009

"Today, we join a select group of five nati

ons who possess the capability to build a nuclear-powered subm

arine," Singh declared in his speech at the eastern naval base of Visakhapatnam.

The submarine launch reflected no aggressive plans by India.

We do not have any aggressive designs, nor do we seek to threaten anyone. We seek an external environment in our region and beyond that is conducive to our peaceful development and the protection of our value systems," Singh said.

A nuclear-powered submarine is a much more complex

platform than any other vessel and India building one on its own is a great achievement. This is the unanimous assessment of officials, be they from the Defence Research and Development

Organisation (DRDO), the Department of Atomic Energy or the Indian Navy.

What enhances the scale of the achievement is that INS Arihant, India’s nuclear-powered submarine, will be fitted with India’s own K-15 ballistic missiles that can be launched from under water. The K-15 missiles, which are already under production, can carry both conventional and nuclear warheads. They have a range of 700 k

m. They are 10.4 metres tall and weigh 6.3 tonnes each.

“This is a very big capability,” a DRDO official said. “It means we can launch missiles with nuclear warheads from ground, drop nuclear bombs from air and also fire them now from under water.”

A nuclear-powered submarine bestowed on India the status of a nation possessing a blue-water navy because the boat can travel far and wide.

While the Navy designed INS Arihant, the Bhabha Atomic Research Centre (BARC) built the mini-nuclear reactor that powers the submarine, the DRDO developed the K-15 missiles. The K-15 missiles have been test-fired several times from submerged pontoons off the coast of Visakhapatnam. A missile emerging from the water without losing its fire was a technology in itself.

A distinct advantage of a nuclear-powered submarine is that while it can remain under water for a long duration, a diesel-fired submarine has to rise to the surface every day for ejecting the carbon-dioxide produced by the diesel-generator. Otherwise, the boat’s crew will face problem.

“In a nuclear-energy system used in a submarine, there is no emission of carbon-dioxide. It is a clean form of energy,” a DRDO official explained. “The turbine operating on enriched uranium in INS Arihant is a clean system. But a diesel-generator emits carbon-dioxide. You cannot discharge it into the water. So the submarine has to be brought up to the surface every day to eject the carbon-dioxide into the atmosphere.”

Trials to follow

DRDO officials cautioned that while INS Arihant entering water from the dry-dock in the Ship-Building Centre of the Visakhatpatnam harbour on Sunday was an important step forward, making the boat operational would take time. “The submarine will now go for harbour acceptance trials (HATs). Then it will go for sea acceptance trials (SATs). Later it will go down to a certain depth and come up,” they said.

A nuclear-powered submarine was a highly complex platform and safety regulations had to be adhered to. “There are hundreds of systems on the boat. They have to work one after another. This is called setting-to-work. The HATs and SATs will last about a year-and-a-half. This is the most difficult period of activity and you have to do it perfectly. Then the K-15 missiles will be fitted into the boat.”

M. Natarajan, Scientific Advisor to the Defence Minister, was present when the INS Arihant was launched on Sunday.

The project has been named the “Advanced Technology Vessel” (ATV) programme. Vice-Admiral (retired) D.S.P. Varma is the Director-General of the ATV programme.