1. DroidForums.net is currently undergoing a major software upgrade. If you are experiencing any problems logging in please: Contact Us

Trillian and "U Awake" messages that I didn't send??? Security Issue!!!

Discussion in 'Android Tech Support' started by kijutsu, Feb 9, 2011.

  1. kijutsu
    Offline

    kijutsu New Member

    Joined:
    Jan 2, 2010
    Messages:
    97
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Allen Park, MI
    So, very weird thing happened last night.

    I have the LookOut Mobile Security program on my Droid 1.
    Last night, at around 3am, Trillian decided that it would send out 7 or 8 random messages to a few friends on my facebook.

    "*insert name here*, u awake?"

    And one of my friends responded to it saying "Yeah, what's up?"

    Basically, I'm trying to figure out where the hell these messages came from?
    I keep my password changed on a regular basis on facebook and all of my passworded accounts for the most part. The LookOut mobile security thing hasn't come back with anything that is flagged for security issues.

    The following programs are installed on my Droid:
    AK Notepad
    AndroidVNC
    DroidForums
    ES File Explorer
    Faceook
    IRSSI ConnectBot
    iJobs JobSearch
    Pandora
    RealCalc
    ROM Manager
    ScanLife
    SetCPU
    Shazam
    SubSonic
    VEVO
    WeatherBug
    XiiaLive
    LauncherPro

    So nothing too crazy or flakey looking. I just want to make sure this doesn't happen again, I've already went through and changed passwords this morning after the incident occured. Is there a backdoor on these things that I'm not aware of?
  2. Backnblack
    Offline

    Backnblack Premium Member Premium Member

    Joined:
    Nov 18, 2009
    Messages:
    11,263
    Likes Received:
    5
    Trophy Points:
    0
    Only the developer would be able to tell you that....But I am sure they wouldn't admit it if there was...
  3. kijutsu
    Offline

    kijutsu New Member

    Joined:
    Jan 2, 2010
    Messages:
    97
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Allen Park, MI
    Any idea on where the crap these messages came from then? :)

    It's almost as if they were entered locally, and there was no one in my house last night.
  4. Backnblack
    Offline

    Backnblack Premium Member Premium Member

    Joined:
    Nov 18, 2009
    Messages:
    11,263
    Likes Received:
    5
    Trophy Points:
    0
    There have been some user report weird things like that but AFAIK nothing has ever been pin pointed as a cause.
  5. kijutsu
    Offline

    kijutsu New Member

    Joined:
    Jan 2, 2010
    Messages:
    97
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Allen Park, MI
    That's.. decidedly odd. I guess I'll just monitor the issue, and if it starts going wonky again I'll wipe the device and start fresh. It's about due for a wipe anyway.
  6. AngryHatter
    Offline

    AngryHatter New Member

    Joined:
    Jan 4, 2011
    Messages:
    520
    Likes Received:
    1
    Trophy Points:
    0
    Your FB.
    Did you click one of those threads so it would then message your friends list?
    Since we tie our phone to the account, if the account gets garbage the phone participates in the garbage.
  7. kijutsu
    Offline

    kijutsu New Member

    Joined:
    Jan 2, 2010
    Messages:
    97
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Allen Park, MI
    God no... I hate all those stupid 'apps' on facebook. I block 99.99999% of them.
  8. Hawaiian Princess
    Offline

    Hawaiian Princess Moderator

    Joined:
    Nov 27, 2010
    Messages:
    4,027
    Likes Received:
    13
    Trophy Points:
    0
    Location:
    Hawaii
    let me add my situation:
    my phone would send me notifications that my username and/or pswd is incorrect, it happened more than 3x. then I got an email saying IP Location (and it gave me the latitude) of Livingston NJ has access this account. WTH!! I also got phone alert indicating my username and/or pswd was incorrect on my business email. now im worried, chg my email acct, chg pswd, etc etc etc. YAHOO sends me an email saying I just shared my info with MOTOBLUR phone so again...WTH!!!
    so anyway im working with VZW and local law enforcement to stop this none sense. virus or not, I've been reading all sorts of creepy things happening in Android world. never had issues when I had BB but I still wouldn't trade my Droid to go back....hmmmm

    Aloha from Hawaii
  9. AngryHatter
    Offline

    AngryHatter New Member

    Joined:
    Jan 4, 2011
    Messages:
    520
    Likes Received:
    1
    Trophy Points:
    0
    Not a FB app. Amessage. A post.
    Ever get a message from a friend, "Ha, I saw this video..."?
    Those are malware.
  10. Martin030908
    Offline

    Martin030908 DF Super Moderator

    Joined:
    Nov 1, 2009
    Messages:
    8,805
    Likes Received:
    0
    Trophy Points:
    0
    id guess it originated from facebook.

    btw, the lookout app (and any anti virus on android) are fluff. they're not going to catch malware.

    *DroidForums app DOES*
  11. AngryHatter
    Offline

    AngryHatter New Member

    Joined:
    Jan 4, 2011
    Messages:
    520
    Likes Received:
    1
    Trophy Points:
    0
    That IS you.
    Livingston is Verizon. I got the same message and the same locale, I am SoCal - Verizon routes us west of the Mississippi people through there at times.
    It said that someone IN Livingston logged into FB...YOU. Just the way the signal was proxied to FB from Verizon.

    I never got any alerts nor any requests to change anything.
    No money is gone and my contacts have not complained about messages.
    Another time when I used the phone to get into FB I got the same email, but since I wasn't at home, i.e. my location had changed the ip changed as well.
    And this time it was local.


    Hi AngryHatter,

    A new device named "a mobile device" was added to your Facebook account (Today at 10:39pm) from Livingston, NJ, US(IP=174.254.32.xxx). (Note: This location is based on information from your ISP or wireless provider.)

    Tell me that isn't what you got.
    ;)
  12. UNC
    Offline

    UNC New Member

    Joined:
    Jan 12, 2010
    Messages:
    1,359
    Likes Received:
    1
    Trophy Points:
    0
    Location:
    Fayettenam,NC
    +1,000,000

    I'd be willing to bet every last dollar that's what it was.
    When you opened it, it didn't say "HAHA YOU MESSED UP!!!" They keep it discreet.
  13. Martin030908
    Offline

    Martin030908 DF Super Moderator

    Joined:
    Nov 1, 2009
    Messages:
    8,805
    Likes Received:
    0
    Trophy Points:
    0
    watch the language please.



    *DroidForums app DOES*
  14. Hawaiian Princess
    Offline

    Hawaiian Princess Moderator

    Joined:
    Nov 27, 2010
    Messages:
    4,027
    Likes Received:
    13
    Trophy Points:
    0
    Location:
    Hawaii
    I asked VZW specifically if this location was Verizon, the answer I got was NO. they ran that IP location and it wasn't verizon




    Aloha from Hawaii
  15. AngryHatter
    Offline

    AngryHatter New Member

    Joined:
    Jan 4, 2011
    Messages:
    520
    Likes Received:
    1
    Trophy Points:
    0
    Verizon employees, at least the lower tier people are not well versed. Just look at the message/ip that I got and tell me it's not the same?
    It's a login to FB from your phone.
    You SHOULD get that email every time you use teh FB phone app, unless you turn that notification off.
  16. AngryHatter
    Offline

    AngryHatter New Member

    Joined:
    Jan 4, 2011
    Messages:
    520
    Likes Received:
    1
    Trophy Points:
    0
    Back to the OP.
    The other reason I say all this is that Trillian is an IM client.
    It by itself sends nothing. You would have to have some other connection to that client.

    Which is easy.
    I can log onto Trillian on both PC and phone effectively having one appear to be sending messages on it's own as far as the other is concerned.

    I did this tonight having it open on the PC, I was on the couch watching the tube and opened the IM from the phone.
    When I went back into the office the PC had the entire conversation from the phone on the screen. Had you been sitting in my office, you would have thought the PC possessed.
    ;)
  17. Natey2
    Offline

    Natey2 Active Member

    Joined:
    Oct 23, 2010
    Messages:
    1,339
    Likes Received:
    4
    Trophy Points:
    38
    DroidForums app catches malware??
    Sorry, couldn't resist. :)

    Sent from my DROIDX using DroidForums App
  18. Hawaiian Princess
    Offline

    Hawaiian Princess Moderator

    Joined:
    Nov 27, 2010
    Messages:
    4,027
    Likes Received:
    13
    Trophy Points:
    0
    Location:
    Hawaii
    ya ok.

    Aloha from Hawaii
  19. Natey2
    Offline

    Natey2 Active Member

    Joined:
    Oct 23, 2010
    Messages:
    1,339
    Likes Received:
    4
    Trophy Points:
    38
    When I logged into gmail from a PC, I saw a notification that my account had been accessed from some unusual IP addresses. NJ based IPs too, which were 3rd-party app related.
    Yeah, I hate giving 3rd-party apps access to my accounts, but many apps require them to function, and there's no telling how/where they store those credentials.

    Good that Google monitors this kind of stuff.
    Or are they becoming Big Brother? ;)

    Now, gmail occasionally makes me type in a computer-generated sequence of characters to verify its a human (me) trying to login.
    That may cause the other apps to fail on login.

    Sent from my DROIDX using DroidForums App
  20. Hawaiian Princess
    Offline

    Hawaiian Princess Moderator

    Joined:
    Nov 27, 2010
    Messages:
    4,027
    Likes Received:
    13
    Trophy Points:
    0
    Location:
    Hawaii
    thank u to both of u but, it actually was a hacker in this case. as mentioned, my business email (don't use yahoo, go figure) was being tampered with. I feel little at ease knowing not just me got that Livingston IP but on the same note, it should not had affected my business email as it has no baring or any relation to FB or my gmail.
    either way, the person will receive a letter from my attorney soon.
    have a good day to all....

    Aloha from Hawaii
Search tags for this page
android 4 livingston, nj facebook block
,
facebook for android livingston nj
,

how do i stop sharing my yahoo on motoblur

,
verizon ip in livingston nj
,
verizon order, acct-chg