Spam Problems?

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Spam Problems?

Owen Densmore
Administrator
I've gotten two spam emails that may have come from hacked email accounts.

Anyone else get similar ones?

   -- Owen


---------- Forwarded message ----------
From: John Hellier <[hidden email]>
Date: Mon, Jun 17, 2013 at 3:45 PM
Subject: FW: John Hellier
To: cjungm <[hidden email]>, Dad <[hidden email]>, Owen Densmore <[hidden email]>, Eli <[hidden email]>, ewhitmore <[hidden email]>




---------- Forwarded message ----------
From: Dena Aquilina <[hidden email]>
Date: Mon, Jun 17, 2013 at 8:55 PM
Subject: [sfx: Discuss] RE: Dena Aquilina
To: discuss lists <[hidden email]>, Don Begley <[hidden email]>, Dorothy Massey <[hidden email]>, Drew Trujillo <[hidden email]>, Ed Angel <[hidden email]>


You received this message because you are subscribed to the Santa Fe Complex "discuss" group.
To post to this group, send email to [hidden email]
To unsubscribe from this group, send email to
[hidden email]
For more options, visit this group at
http://groups.google.com/a/sfcomplex.org/group/discuss
 

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com
Reply | Threaded
Open this post in threaded view
|

Re: Spam Problems?

Gary Schiltz-4
I got one of the two that you received. I've never understood how (or if) "only subscribers can post" lists can work. Can anyone post if the "From:" header of their email is a valid user? That would be super easy to spoof. In the case of the two spam messages, how would that apply? I.e. are [hidden email] and [hidden email] members of the list?


On Jun 17, 2013, at 11:08 PM, Owen Densmore <[hidden email]> wrote:

I've gotten two spam emails that may have come from hacked email accounts.

Anyone else get similar ones?

   -- Owen


---------- Forwarded message ----------
From: John Hellier <[hidden email]>
Date: Mon, Jun 17, 2013 at 3:45 PM
Subject: FW: John Hellier
To: cjungm <[hidden email]>, Dad <[hidden email]>, Owen Densmore <[hidden email]>, Eli <[hidden email]>, ewhitmore <[hidden email]>




---------- Forwarded message ----------
From: Dena Aquilina <[hidden email]>
Date: Mon, Jun 17, 2013 at 8:55 PM
Subject: [sfx: Discuss] RE: Dena Aquilina
To: discuss lists <[hidden email]>, Don Begley <[hidden email]>, Dorothy Massey <[hidden email]>, Drew Trujillo <[hidden email]>, Ed Angel <[hidden email]>


You received this message because you are subscribed to the Santa Fe Complex "discuss" group.
To post to this group, send email to [hidden email]
To unsubscribe from this group, send email to
[hidden email]
For more options, visit this group at
http://groups.google.com/a/sfcomplex.org/group/discuss
 
============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com
Reply | Threaded
Open this post in threaded view
|

Re: Spam Problems?

Dean Gerber
In reply to this post by Owen Densmore
I received one from Dena Aquilina.  Did not open it.


From: Owen Densmore <[hidden email]>
To: Complexity Coffee Group <[hidden email]>; [hidden email]
Sent: Monday, June 17, 2013 10:08 PM
Subject: [FRIAM] Spam Problems?

I've gotten two spam emails that may have come from hacked email accounts.

Anyone else get similar ones?

   -- Owen


---------- Forwarded message ----------
From: John Hellier <[hidden email]>
Date: Mon, Jun 17, 2013 at 3:45 PM
Subject: FW: John Hellier
To: cjungm <[hidden email]>, Dad <[hidden email]>, Owen Densmore <[hidden email]>, Eli <[hidden email]>, ewhitmore <[hidden email]>




---------- Forwarded message ----------
From: Dena Aquilina <[hidden email]>
Date: Mon, Jun 17, 2013 at 8:55 PM
Subject: [sfx: Discuss] RE: Dena Aquilina
To: discuss lists <[hidden email]>, Don Begley <[hidden email]>, Dorothy Massey <[hidden email]>, Drew Trujillo <[hidden email]>, Ed Angel <[hidden email]>


You received this message because you are subscribed to the Santa Fe Complex "discuss" group.
To post to this group, send email to [hidden email]
To unsubscribe from this group, send email to
[hidden email]
For more options, visit this group at
http://groups.google.com/a/sfcomplex.org/group/discuss
 

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com
Reply | Threaded
Open this post in threaded view
|

Re: Spam Problems?

Steve Smith
In reply to this post by Gary Schiltz-4
Gary, et al -

Mail servers have gotten a lot less permissive about spoofing... for example, while I could fiddle my "From:" field in my mail header, to look as if it came [hidden email], my SMPT server would consider that "mail forwarding" and unless (in an unlikely case) my ISP had a deal with whomever hosts your ISP to provide SMTP or mail-forwarding services, it would just bounce it back at me.

The way I find most spam like this gets generated seems to be people whose accounts on large servers (e.g. yahoo) get hacked.  And (apparently) someone (probably using an automated tool) is connecting to the yahoo SMTP server and sending mail *AS IF and IN ALL WAYS* it had come from Dena or Ghellier for example.

I get this kind of stuff (seeming to come from SOMEONE I know) at least weekly... whether to a large "to" list or to a mail reflector such as SFX_Discuss or FRIAM.

It just seems to be part of the territory.  It is usually so lame and obvious it is easy to ignore.

- Steve
I got one of the two that you received. I've never understood how (or if) "only subscribers can post" lists can work. Can anyone post if the "From:" header of their email is a valid user? That would be super easy to spoof. In the case of the two spam messages, how would that apply? I.e. are [hidden email] and [hidden email] members of the list?


On Jun 17, 2013, at 11:08 PM, Owen Densmore <[hidden email]> wrote:

I've gotten two spam emails that may have come from hacked email accounts.

Anyone else get similar ones?

   -- Owen


---------- Forwarded message ----------
From: John Hellier <[hidden email]>
Date: Mon, Jun 17, 2013 at 3:45 PM
Subject: FW: John Hellier
To: cjungm <[hidden email]>, Dad <[hidden email]>, Owen Densmore <[hidden email]>, Eli <[hidden email]>, ewhitmore <[hidden email]>




---------- Forwarded message ----------
From: Dena Aquilina <[hidden email]>
Date: Mon, Jun 17, 2013 at 8:55 PM
Subject: [sfx: Discuss] RE: Dena Aquilina
To: discuss lists <[hidden email]>, Don Begley <[hidden email]>, Dorothy Massey <[hidden email]>, Drew Trujillo <[hidden email]>, Ed Angel <[hidden email]>


You received this message because you are subscribed to the Santa Fe Complex "discuss" group.
To post to this group, send email to [hidden email]
To unsubscribe from this group, send email to
[hidden email]
For more options, visit this group at
http://groups.google.com/a/sfcomplex.org/group/discuss
 
============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com
Reply | Threaded
Open this post in threaded view
|

Re: Spam Problems?

Steve Smith
In reply to this post by Gary Schiltz-4
A bit of threadbending....

Speakng of SPAM and Spoofs and such:

I recently had something entirely new for me happen on my smart phone
(iPhone 4).   I got a text and a phone call (which I didn't answer) from
what felt like Santa Fe (was a 505) number.   I'm not sure which came in
first.  No message left.   Text was "Hey" or similar.  Normally I would
ignore the latter if I didn't know who it was from and I *always* screen
phone calls, allowing my voicemail to take any number I don't
know/expect, etc.

Another text came in saying something like "are you ignoring me?" and I
was feeling a little frisky so I answered with some glib answer like
"yes, but only because you probably have the wrong number, this is
Steve, who is this?"

What I got back was a "Hey Baby!".   Which felt kinda automated, but
still frisky I answered: "Is this Eliza?" (referring to the classic AI
program pretending to be a psychiatrist).  I immediately got another
whacky text that seemed clearly not responsive...  I then decided to
ignore it.

A while later I got another "are you ignoring me?" which lead me to some
other polite/banal response, to which I got an SMS picture of cute
teenage girl holding her phone up as if taking a picture of her
self...   and another "Hey Babey!"... etc.

By this time I was just black-boxing the whole thing, trying to figure
out if there was a (very lame) person on the other end, or an automated
program.  I couldn't figure out what the angle was.   We went back and
forth and in fact I started getting phone calls as well as txts which I
still didn't answer expecting some kind of message (maybe).   The "are
you ignoring me?" and "hey babey" and "Love you" messages kept
escalating... and the phone calls yielded two or three messages that
were all 2-4 seconds of silence.

My daughters (adults who I was spending fathers day with) warned me it
was some bad scam though they couldn't figure out what either. After a
day of this I just started ignoring all texts and phone calls from the
number and the frequency kicked up almost to a Denial of Service
level..  along with txt/SMS I also started getting iMessages (apple's
specific version?) and FaceTime connection requests .  A text or a phone
every few minutes!   I went and read in my carrier's (ATT) website and
ohter places about blockingnumbers and harrassing/nuisance calls... and
they really didn't have much if anything useful to offer.

Finally in a fit of pique, I sent a text to the number saying "any
further attempts to contact me bytxt, iMessage, Facetime, phone call
...   will be treated as harrassment and reported... " blah blah blah...

I didn't get another contact attempt after that.  It stopped.  Dead.

   BTW.. early on I did a search on the phone number so see if anyone
else was getting this kind of attempts....  I found no references to the
number except all the reverse lookup directories offering to look it up
for me for a fee.   Except one... it appeared to have been the cell
phone number of a grad student (male) in Los Alamos 5 or more years ago.

I don't know what it was about.  It began to look VERY automated, but
very broad, very aggressive.  The fact that it stopped when I came back
with a semi-official sounding threat suggests to me that it wasn't
completely automated (unless the level of automation was to flag word
stems like "Harrass".

I have a few weak hypothesis but generally am stumped.

Anyone else have this kind of experience?  Have any ideas what the angle
was?

- Steve

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com