Looking at our reports I can confirm that in the past weeks there was spam-bumps. However, it looks like ISPs (or MTA's) are affected in a "dedicated" time range.
As Darin mentioned we also have seen correlations between phishing attempts followed by usage of these catched accounts. [cid:[email protected]] I'm not quite sure but it looks like these guys are smartly monitoring delivery rates and quality over these hijacked accounts. At least I can confirm that around 2 weeks after I had implemented some automated scripts to block such misused accounts we never had any problem. I have noted also some type of "start" message that was always delivered 15 - 180 minutes before the real spam campaign started (mostly to xyz @rambler.ru) Markus -----Ursprüngliche Nachricht----- Von: [email protected] [mailto:[email protected]] Im Auftrag von Darin Cox Gesendet: Dienstag, 19. August 2014 22:49 An: [email protected] Betreff: [SPAM: 103][MBF] Re: Big uptick in spam We were seeing this 3-4 weeks ago. It settled down for us about a week ago, with a bit more slipping through Sniffer than usual at the beginning, tapering off to near normal levels now. Interesting to note. A week or two before the spam onslaught we were seeing 10x the FTP and SMTP hacking attempts. When that dropped is when the spam increase began. Darin. -----Original Message----- From: Don Winsauer Sent: Tuesday, August 19, 2014 4:35 PM To: [email protected]<mailto:[email protected]> Subject: [MBF] Big uptick in spam We are seeing a significant increase in spam in the last two weeks. I have seen times where similar emails are sent but with different links in the email. One gets caught and the other gets through. We have gotten multiple calls from our normally quiet customers. Anyone else seeing this? Thanks, Don ________________________________________________________________ Sent via the WebMail system at net1media.com ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]<mailto:[email protected]>>. To unsubscribe, E-mail to: <[email protected]<mailto:[email protected]>> To switch to the DIGEST mode, E-mail to <[email protected]<mailto:[email protected]>> To switch to the INDEX mode, E-mail to <[email protected]<mailto:[email protected]>> Send administrative queries to <[email protected]<mailto:[email protected]>> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]<mailto:[email protected]>>. To unsubscribe, E-mail to: <[email protected]<mailto:[email protected]>> To switch to the DIGEST mode, E-mail to <[email protected]<mailto:[email protected]>> To switch to the INDEX mode, E-mail to <[email protected]<mailto:[email protected]>> Send administrative queries to <[email protected]<mailto:[email protected]>>
