Strange email

[Emma Krokus]

Not sure what to make of this - and haven't followed the redacted link to find out... Anyone have any ideas?

[19:05] (redacted): Hello,

Are you tired of spending your hard-earned Linden Dollars? We've got an exciting solution just for you! Introducing our SecondLive Viewer, where everything is not only free but also open for endless possibilities.

- Unlock unlimited Linden Dollars (L$) for all your virtual adventures.
- Fly to unlimited heights.
- Build on any land of your choice, all for free.

But that's just the beginning.

Link: (redacted)

We're sincerely thankful to everyone who joins us in our mission to make SecondLife completely free.
Don't miss this incredible opportunity!

Best regards.

[Wulfie Reanimator]

Here's an article about what the deal is: https://gist.github.com/FelixWolf/ddea8e96b8195181098d8d4e7c4273c4

In short, it's a scam, and the "viewer" will install a bunch of malware on your computer that allows the scammer to have remote access to your computer.

Edited November 3, 2023 by Wulfie Reanimator

[Possum888]

Click on the link and it will be asking you for your  bank account details.......

[Chic Aeon]

IF this isn't phishing for your account info then the " SecondLive Viewer" sounds like a copybot viewer and you might want to forward that on to support.  It "could" I guess be an Opensim Ad but that would be my third choice in the possible list.  

 

 

[Marigold Devin]

Something similar was said a few days ago in this thread

 

 

[Rolig Loon]

Yeah, it's a scam.  You can erase it safely.  😎

[Emma Krokus]

Thanks everyone.

I'll forward it to Support.

 

[Emma Krokus]

7 hours ago, Emma Krokus said:

Thanks everyone.

I'll forward it to Support.

 

Well that was tricky.

So it was an offline IM my alt received.

There was nothing on Support Case Form that fitted the issue. So I took my alt inworld and opened an Abuse Report there. Perhaps predictably the resident who sent the IM could not be found in search. Instead I entered Governor Linden as the abuser (hehe) and categorised it as Fraud... and copied the text from the offline message there.

If anyone knows I should have done it differently, please tell me!

[Lindal Kidd]

@Emma KrokusYou did it right!

[Emma Krokus]

2 hours ago, Lindal Kidd said:

@Emma KrokusYou did it right!

Thanks, Lindal.

You'd think it would be easier to report this kind of thing using a Support Case from the Dashboard.

[Emma Krokus]

I've received two more offline IM's from different accounts saying the same thing.

[Rolig Loon]

3 minutes ago, Emma Krokus said:

I've received two more offline IM's from different accounts saying the same thing.

Keep reporting them. It may be easier for Governance to identify the scammer if they have lots of information to work with.

[Emma Krokus]

sobering stuff indeed!

[Garnet Psaltery]

I got my first one today while offline.  I too was puzzled about what category to use in an Abuse Report.  Since I hadn't followed the link I couldn't be sure it was Fraud (though it could be) so I settled for Spam, since others have had the same thing.

[AmeliaJ08]

23 minutes ago, Garnet Psaltery said:

I got my first one today while offline.  I too was puzzled about what category to use in an Abuse Report.  Since I hadn't followed the link I couldn't be sure it was Fraud (though it could be) so I settled for Spam, since others have had the same thing.

Sounds like a lot of people are getting them, I just saw the same thing on Reddit too.

It is an attempt to make people download malware though. Someone on github gist has investigated it, at least 4 separate trojans for anyone who runs the file that is being advertised in these messages:

 

Edited November 4, 2023 by AmeliaJ08