BakeBooks.com

looksee

I was sent a link to this website in good faith by a friend. Its a site that allows you to download ebooks as pdfs.

I was a bit suspicious as downloads are free, there are no ads, and I knew the book in question was still in print and in copyright. The site looked professional but the links for such things as 'Privacy' came up as blank pages. I googled it and a security site said it was suspect.

Before I realised it might not be a sound site I had asked to download a book, it then asked me to register, and it sent me an email immediately with a slight English error in it, but otherwise convincing.

My main reason for doubting it was the fact that it did not appear to have any way of making money, so why would they bother, and I did not want to download books illegally (in copyright).

So what would they have been hoping to gain, other than my email address - which they now have - and could they have done any more mischief if I did not download anything? My anti-virus did not pick anything up.

bonzodog2

Possibly the PDFs have vulnerabilities exploiting un-updated versions of Adobe Reader.

Stuxnet

bonzodog2 wrote: »

Possibly the PDFs have vulnerabilities exploiting un-updated versions of Adobe Reader.

And possibly even fully updated versions of adobe reader, as the source code was stolen a few weeks ago. Should be easy to develop a zero day exploit, having seen the src !!

Solution: SumatraPDF or Foxit Reader possibly safer alternatives atm
Sumatra very barebones, so a good pdf reader

28064212

Stuxnet wrote: »

And possibly even fully updated versions of adobe reader, as the source code was stolen a few weeks ago. Should be easy to develop a zero day exploit, having seen the src !!

Doesn't say much for open-source software :pac:

looksee

Update: I don't appear to have picked up anything noxious, but spam emails have suddenly increased - all of variations on the 'we have money for you' story. They are being filtered out, but I have to wait for them to download anyway. I really was not doing too badly on spam up to this!

Stuxnet

28064212 wrote: »

Doesn't say much for open-source software :pac:

au contraire !!
you have it wrong, adobe stuff isnt open source, thats why a read of the src will surely show how 5hitty the code is in the first place.....

If it was open source in the first place, the community would of hardened it....I can see it being released open source if some zero's are generated from it, the code is out there...might as well release it to the community now.

Dude111

looksee wrote:

Update: I don't appear to have picked up anything noxious, but spam emails have suddenly increased

Yup thats how they justify giving them away FREE (The spam makes them $$$$ with some people)

Its best to always use a throw away email account from www.trash-mail.com for things like this...... When we see 'FREE',there usually is a trade off somewhere...



I hope your spams stop soon

theedude27

Only one real way to deal with Spam.....select all and delete:D

looksee

theedude27 wrote: »

Only one real way to deal with Spam.....select all and delete:D

True, but it is still downloaded first! All the spam is going into junk, but the sudden increase is there!