# New email problem? virus? hack?

**URL:** <https://forums.suse.com/t/new-email-problem-virus-hack/28490>\
**Category:** Chatting over the Back Fence\
**Created:** [August 3, 2016, 6:31pm UTC](https://forums.suse.com/t/new-email-problem-virus-hack/28490 "2016-08-03T18:31:41Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![System1](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@System1](https://forums.suse.com/u/System1)\
**Post date:** [August 3, 2016, 6:31pm UTC](https://forums.suse.com/t/new-email-problem-virus-hack/28490/1 "2016-08-03T18:31:41Z")

</div>

I’ve had 2 emails today, purporting to come from friends, with the  
words “salutations”, followed by a dodgy-looking link. These emails  
were not sent by my friends, just wondered if anyone else has seen  
similar mails today, which might help us narrow it down? I’m sending  
them both to spamcop…

–

Shaun Pond  
in my “day job” I work for ENGL; our aim is to make Windows deployment  
easy

---

<div class="post-metadata">

**Author:** ![ketter](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@ketter](https://forums.suse.com/u/ketter)\
**Post date:** [August 3, 2016, 9:10pm UTC](https://forums.suse.com/t/new-email-problem-virus-hack/28490/2 "2016-08-03T21:10:14Z")

</div>

On Wed, 03 Aug 2016 15:31:41 GMT, Shaun Pond  
[shaunpond@no-mx.forums.microfocus.com](mailto:shaunpond@no-mx.forums.microfocus.com) wrote:  
[color=blue]

> I’ve had 2 emails today, purporting to come from friends, with the  
> words “salutations”, followed by a dodgy-looking link. These emails  
> were not sent by my friends, just wondered if anyone else has seen  
> similar mails today, which might help us narrow it down? I’m sending  
> them both to spamcop…[/color]

Haven’t seen that here. Recently though we’ve seen some fake Docusign  
emails. And people actually click the links.   
Ken

* * *

Create and vote for enhancements!  
[https://www.novell.com/products/enhancement-request.html](https://www.novell.com/products/enhancement-request.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\
**Post date:** [August 4, 2016, 5:15pm UTC](https://forums.suse.com/t/new-email-problem-virus-hack/28490/3 "2016-08-04T17:15:48Z")

</div>

Shaun:

I had something similar about 6 months ago, and tracked it down to  
the brother in Australia of a friend in Florida. The brother can  
clicked a similar email, it stole his contact list and sent emails  
out to everyone on his contact list, and his sister had clicked on  
that email from him, which resulted in an email to me.

I remotely checked her system in Florida, and nothing I ran on it -  
SuperAnti Spyware, MalwareBytes, something else I can’t remember at  
the moment, found anything, and nothing has happened on her system  
since. I sent an email to her brother recommending he run the same  
things, gave him links to it all, and nothing ever showed up on his  
system, either.

If I remember correctly, when I did some googling on it, it’s been  
around for quite awhile. It was only somewhat similar to yours, so it  
could be a variant of what you received. In the emails I received,  
there was some text inserted into the email purporting to be from my  
ISP indicating that there was a problem with rendering the image in  
the email, and to click “here” to view it online. I knew that was  
bogus.

AVG didn’t pick it up scanning the email, either. IIRC I had to put  
the full text of the purported inserted section from my ISP into  
Google to find anything similar, and even then only found one or two  
references to it that were a year or more old.

–  
Susan  
Novell Community Chat Moderator

[http://forums.novell.com/faq.php?faq=novfor#faq\_rules](http://forums.novell.com/faq.php?faq=novfor#faq_rules)

Please read the following before posting in here:  
[http://preview.tinyurl.com/27zopdy](http://preview.tinyurl.com/27zopdy)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\
**Post date:** [August 4, 2016, 7:29pm UTC](https://forums.suse.com/t/new-email-problem-virus-hack/28490/4 "2016-08-04T19:29:53Z")

</div>

Susan,

interesting: one email claimed to come from a certain long-suffering  
lady who lives with a chili nut from NZ 🙂 The other is from my boss’s  
uncle, who demonstrated/sold us an expensive piece if kitchen equipment

- the only thing they have in common is FB, but it may just be a  
coincidence…

–

Shaun Pond  
in my “day job” I work for ENGL; our aim is to make Windows deployment  
easy

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\
**Post date:** [August 4, 2016, 11:09pm UTC](https://forums.suse.com/t/new-email-problem-virus-hack/28490/5 "2016-08-04T23:09:06Z")

</div>

Shaun:

If both don’t have your email address, and only know you via FB, you  
might check to make sure someone hasn’t duplicated your FB account to  
get access to your contacts there. Just a thought, since FB seems to  
be the common denominator. If they don’t know one another as FB  
friends, it’s unlikely either of them has been FB hacked. I’m not  
implying you’ve been hacked, just something to check regarding a  
duplicate account. 🙂

–  
Susan  
Novell Community Chat Moderator

[http://forums.novell.com/faq.php?faq=novfor#faq\_rules](http://forums.novell.com/faq.php?faq=novfor#faq_rules)

Please read the following before posting in here:  
[http://preview.tinyurl.com/27zopdy](http://preview.tinyurl.com/27zopdy)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\
**Post date:** [August 5, 2016, 1:07pm UTC](https://forums.suse.com/t/new-email-problem-virus-hack/28490/6 "2016-08-05T13:07:59Z")

</div>

Susan,

they both do have my email, it just seems coincidental to get emails  
from both, but the world’s full of them 😉

–

Shaun Pond  
in my “day job” I work for ENGL; our aim is to make Windows deployment  
easy
