[vox] OT new spam technique
Ken Bloom
vox@lists.lugod.org
Mon, 12 Jan 2004 00:09:32 -0800
--ZmUaFz6apKcXQszQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, Jan 11, 2004 at 11:21:06PM -0800, andy wergedal wrote:
> FYI, I have started receiving mail undeliverable errors in
> various email accounts.
>=20
> The spammers are using a legitimate (valid) email account
> and spoofing the FROM header to be from that account.
>=20
> From: "Worlledge" <awerg@YAHOO.COM>=09
> To: awerg@newmail.net=09
> Subject: awerg: Go0d S1tes To See: Y0u Asked To Be On Our
> Llst=09
> Date: 7 Jan 2004 23:39:31 +0000
>=20
>=20
> From: "SportsEdge2" <awerg@MYDOMAIN.COM>=09
> To: awerg@sportsedge.com=09
> Subject: awerg: Go0d S1tes To See: Y0u Asked To Be On Our
> Llst=09
> Date: 7 Jan 2004 23:39:04 +0000
>=20
> The spam gets through because my account is valid.
>=20
> Clever but annoying.
>=20
> -- Andy
I don't know what your guy is doing with this, changing the domain of
your email address and still coming up with valid email addresses, but
I got a few spams from my own email address, so I had to remove my
spamassassin whitelist entry for @ucdavis.edu. So annoying.
--=20
I usually have a GPG digital signature included as an attachment.
See http://www.gnupg.org/ for info about these digital signatures.
My key was last signed 10/14/2003. If you use GPG *please* see me about=20
signing the key. ***** My computer can't give you viruses by email. ***
--ZmUaFz6apKcXQszQ
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFAAlY8lHapveKyytERAmNUAKCPiIZcJy3vUurT661aAohKGXP4kQCeIjGF
6KjbN/1fCZWBvY6p1RqsAuw=
=BNZZ
-----END PGP SIGNATURE-----
--ZmUaFz6apKcXQszQ--