Enigma software, have they been spoofed

Enigma is not in the credit business and Enigma has not been spoofed, and there are false statements and images on this webpage http://certifiedbug.com/blog/2008/05/21/enigmasoftware-payday-loan/. There are images suggesting to readers of your site that our web site and servers have been compromised. And that our software is scanning for bad credit and offering pay day loans. The image suggesting that SpyHunter will scan the Entire computer to detect negative credit is a fake image. It was never on our servers.

Fake Image URL: http://certifiedbug.com/blog/wp-content/enigmasoftware4.png

As far as the URL and title referenced in the article. Our pages are dynamically generated, where you can pass parameters and the page will have the title and other keywords based on the querystring keyword or phrase passthrought it. For example, in the page you are describing http://www.enigmasoftware.com/spyhunter_more_info.php?n=?n=xxxx will change the content inside the title tags xxxx. This is a common practice in most dynmaically generated content on most content management systems.

Someone created an account on a china expatriate forum that made only one post with a link on this page http://www.alloexpat.com/china_expat_forum/member56188.html to a non-existent page on our server which was then dynamically generated. The page, which subsequently showed up in Google. Has text relating to Payday Loans.

This whole situation then became blown out of proportion with someone under the alias of JeanInMontana making accusations that we are using data that we collect for phishing and Spam. These accusations are false and entirely basesless.

Enigma Software Group USA, LLC is not in the loan business.

Google is your friend
hxxp://www.google.com/search?hl=enamp q=%22
Scan+your+entire+computer+to+detect+negative+credit+
-+Payday+loan&btnG=Search

Sorry, Enigma Software Group USA, LLC; but the fact is your page did say that until recently.

“Trust me, you don’t need us to damage your reputation - ESG do that all by themselves”

Steven, I remember you from other conversations, that is your opinion and irrelevant to what we are discussing. We are aware of your opinions on us. Our loyal customers do that share your opinion. I think your issue with us is almost like a personal obsession. I would advise to please let’s stick to the issues. For example, the issue of the page with the exploited querystring (n=…..) Let’s address that.

Certifiedbug , we will investigate who is this forum spammer who has it in for us.. He or she will not be able to exploit that querystring anymore. We are exploring our options with our legal counsel.

Alvin, I have updated my blog post to say that despite the statement in the article I linked to which claims Enigma has changed its name, you have posted to confirm otherwise.

As for the above issue of the spammer and potential exploit redirection, would it not be beneficial in this case to work with Tashi with regards tracking down and shutting down the spammers if at all possible? It seems to me bringing this issue to light has actually been beneficial to yourselves in terms of both making you aware of it, and also giving you the chance to take action to shut this person down completely. Just a thought

Paperghost,

Is there a way for us to speak to you in private?

Alvin

Alvin,

I am quite familiar with Content Management Systems and dynamically generated web pages.

Some person or persons have taken advantage of a vulnerability in your software and exploited it. You have since corrected the vulnerability to prevent code injection.

That doesn’t change the fact that some one from your company falsely accused certifiedbug of posting fake images and spreading false rumors. Those pages did exist, with the content displayed; as posted in the article. I’ve seen them, 4 pages, including spyhunter_more_info.php.

Be thankful that the malicious redirect,was ineffective. I’ve been to the redirect, to investigate. I won’t discuss the particulars of the attempted exploit in an open discussion that anyone, including the perpetrators, can view.

ShadowPuterDude,

“Some person or persons have taken advantage of a vulnerability in your software and exploited it.”

It was not my “Software” that was exploited, it was simply the page or pages to be exact.

Alvin

Correcting my miss-typed email addy: spd@malwareteks.com