WARNING: Account taken by a spam worm

Asked by Alberto Salvia Novella

<https://launchpad.net/~custom> seems to have gotten a spam worm in his computer, and now it is spamming Launchpad reports and teams.

Question information

Language:
English Edit question
Status:
Solved
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Solved by:
Colin Watson
Solved:
Last query:
Last reply:
Revision history for this message
Colin Watson (cjwatson) said :
#1

This is normally a case of spam sent to Launchpad addresses forging somebody's From: field and thus being attributed to a user; there's usually no evidence that it's actually the fault of software running on the user's computer. I've hidden the one spam comment I could find from that user on bug 1, but if you have other specific examples then please provide them.

Revision history for this message
Alberto Salvia Novella (es20490446e) said :
#2
Revision history for this message
Colin Watson (cjwatson) said :
#3

Was that message sent using the "Contact this team" feature, or by some other mechanism? Do you have the headers of that message?

Revision history for this message
Alberto Salvia Novella (es20490446e) said :
#4

Colin Watson:
> Was that message sent using the "Contact this team" feature, or by some
> other mechanism? Do you have the headers of that message?

Launchpad:
 > Papercuts Ninjas has a new message requiring your approval.
 >
 > Subject: important message
 > Author name: Chanchao
 > Author url: https://launchpad.net/~custom
 > Date: 2015-10-23 09:15:11+00:00
 > Message-ID: <000000b6bdb2$8b873476$a4eee910$@freenet.de>

Revision history for this message
Best Colin Watson (cjwatson) said :
#5

OK, messages to mailing lists also arrive by mail, so in that case the source is untrusted; we're just guessing at its origin based on the From: header.

Revision history for this message
Alberto Salvia Novella (es20490446e) said :
#6

Okay, thank you 👍