Unusual list spam - caution

J. Landman Gay jacque at hyperactivesw.com
Fri Jul 10 15:17:18 EDT 2015


Mine were from Jim McConnell too. I wonder if he (or someone) has got 
some kind of malware that's doing this.

The list archives are reproduced at both Gmane and Nabble, so it could 
also be a bot that scans one of those and sends this out. The odd thing 
is that it doesn't actually do anything, there aren't any links or 
enclosures.

On 7/10/2015 2:06 PM, Peter Haworth wrote:
> I got the same type of emails delivered to my personal email address, both
> from Jim McConnell. Sure sounds like the mailing membership has been hacked
> somehow.  Could this part of the ddos attacks on the forum that have been
> mentioned recently?
>
>
>
> On Fri, Jul 10, 2015 at 11:22 AM J. Landman Gay <jacque at hyperactivesw.com>
> wrote:
>
>> I'm not sure what this means but it probably deserves a heads-up. I
>> received three emails today that appeared to be replies to the three
>> list posts I made yesterday. They were all from the same person, whose
>> name I do not recognize. The entire text of the message was:
>>
>>       This registration used a hijacked email address!
>>
>> followed by a quoted copy of my post. There was no other text.
>>
>> When I first saw these on my Android tablet they each included an
>> enclosure of different lengths. That was the tip-off to check the
>> headers, since this list does not allow enclosures. The headers of a
>> real list mail include "on-rev.com", these had no mention of the on-rev
>> domain. They all came from a private user domain via Quest.
>>
>> I then retrieved the email on my Mac and there are no enclosures listed
>> for any of the three. I'm not sure where they went, I didn't open them.
>> They may have been copies of the quoted posts but I'm not sure.
>>
>> At any rate, something odd is going on so keep an eye out.
>>
>> --
>> Jacqueline Landman Gay         |     jacque at hyperactivesw.com
>> HyperActive Software           |     http://www.hyperactivesw.com
>>
>> _______________________________________________
>> use-livecode mailing list
>> use-livecode at lists.runrev.com
>> Please visit this url to subscribe, unsubscribe and manage your
>> subscription preferences:
>> http://lists.runrev.com/mailman/listinfo/use-livecode
>>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>


-- 
Jacqueline Landman Gay         |     jacque at hyperactivesw.com
HyperActive Software           |     http://www.hyperactivesw.com




More information about the Use-livecode mailing list