Unusual list spam - caution

[Peter Haworth]

I got the same type of emails delivered to my personal email address, both
from Jim McConnell. Sure sounds like the mailing membership has been hacked
somehow.  Could this part of the ddos attacks on the forum that have been
mentioned recently?



On Fri, Jul 10, 2015 at 11:22 AM J. Landman Gay <jacque at hyperactivesw.com>
wrote:

> I'm not sure what this means but it probably deserves a heads-up. I
> received three emails today that appeared to be replies to the three
> list posts I made yesterday. They were all from the same person, whose
> name I do not recognize. The entire text of the message was:
>
>      This registration used a hijacked email address!
>
> followed by a quoted copy of my post. There was no other text.
>
> When I first saw these on my Android tablet they each included an
> enclosure of different lengths. That was the tip-off to check the
> headers, since this list does not allow enclosures. The headers of a
> real list mail include "on-rev.com", these had no mention of the on-rev
> domain. They all came from a private user domain via Quest.
>
> I then retrieved the email on my Mac and there are no enclosures listed
> for any of the three. I'm not sure where they went, I didn't open them.
> They may have been copies of the quoted posts but I'm not sure.
>
> At any rate, something odd is going on so keep an eye out.
>
> --
> Jacqueline Landman Gay         |     jacque at hyperactivesw.com
> HyperActive Software           |     http://www.hyperactivesw.com
>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>