Unusual list spam - caution

Peter Haworth pete at lcsql.com
Fri Jul 10 21:20:46 CEST 2015


Yes I thought that was strange too.  Nevertheless, gMail now directs them
straight to my Spam folder.

On Fri, Jul 10, 2015 at 12:17 PM J. Landman Gay <jacque at hyperactivesw.com>
wrote:

> Mine were from Jim McConnell too. I wonder if he (or someone) has got
> some kind of malware that's doing this.
>
> The list archives are reproduced at both Gmane and Nabble, so it could
> also be a bot that scans one of those and sends this out. The odd thing
> is that it doesn't actually do anything, there aren't any links or
> enclosures.
>
> On 7/10/2015 2:06 PM, Peter Haworth wrote:
> > I got the same type of emails delivered to my personal email address,
> both
> > from Jim McConnell. Sure sounds like the mailing membership has been
> hacked
> > somehow.  Could this part of the ddos attacks on the forum that have been
> > mentioned recently?
> >
> >
> >
> > On Fri, Jul 10, 2015 at 11:22 AM J. Landman Gay <
> jacque at hyperactivesw.com>
> > wrote:
> >
> >> I'm not sure what this means but it probably deserves a heads-up. I
> >> received three emails today that appeared to be replies to the three
> >> list posts I made yesterday. They were all from the same person, whose
> >> name I do not recognize. The entire text of the message was:
> >>
> >>       This registration used a hijacked email address!
> >>
> >> followed by a quoted copy of my post. There was no other text.
> >>
> >> When I first saw these on my Android tablet they each included an
> >> enclosure of different lengths. That was the tip-off to check the
> >> headers, since this list does not allow enclosures. The headers of a
> >> real list mail include "on-rev.com", these had no mention of the on-rev
> >> domain. They all came from a private user domain via Quest.
> >>
> >> I then retrieved the email on my Mac and there are no enclosures listed
> >> for any of the three. I'm not sure where they went, I didn't open them.
> >> They may have been copies of the quoted posts but I'm not sure.
> >>
> >> At any rate, something odd is going on so keep an eye out.
> >>
> >> --
> >> Jacqueline Landman Gay         |     jacque at hyperactivesw.com
> >> HyperActive Software           |     http://www.hyperactivesw.com
> >>
> >> _______________________________________________
> >> use-livecode mailing list
> >> use-livecode at lists.runrev.com
> >> Please visit this url to subscribe, unsubscribe and manage your
> >> subscription preferences:
> >> http://lists.runrev.com/mailman/listinfo/use-livecode
> >>
> > _______________________________________________
> > use-livecode mailing list
> > use-livecode at lists.runrev.com
> > Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> > http://lists.runrev.com/mailman/listinfo/use-livecode
> >
>
>
> --
> Jacqueline Landman Gay         |     jacque at hyperactivesw.com
> HyperActive Software           |     http://www.hyperactivesw.com
>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>


More information about the use-livecode mailing list