I have been getting similar notices from "Network Solutions"
https://en.wikipedia.org/wiki/Western_false_front_architecture
Subject: Important Message from Network Solutions
Date: Fri, 9 Jun 2017 17:19:21 +0000
From: supp...@networksolutions.com <pwg@drawprecision.c 0m (I
mangled the .com)
See how the Name (without the carets, <>) looks like an e-mail address
but the link is fishy? There were other hints too.
My wild guess is that they are mining network records to create false
fronts in order to get you to use a username and or password or some
layered approach to get one to interact to eventually get there.
https://www.youtube.com/watch?v=C3rDWENRI7c
I think we all tend to use similar logins for all of our resources if
they can get into your low security login they have a good chance to get
into your bank account.
I forwarded my suspicious messages to:
s...@uce.gov
reportphish...@antiphishing.org
I don't know if it will do any good.
Be careful out there.
https://www.youtube.com/watch?v=_pIkkzDagsY
On 06/10/2017 03:04 AM, Erik Christiansen wrote:
On 10.06.17 12:26, Cristian Bontas wrote:
Got one too.
But if fake, I don't really get its purpose.
The link seems legit, and the sourceforge.net certificates are valid. There
doesn't seem to be any URL trick, either.
So how would a third party benefit from my subscription reconfirmation?
Any ideas?
The spam came directly from amazonses to my ISP, without going anywhere
near sourceforge:
Received: from a9-46.smtp-out.amazonses.com ([54.240.9.46]) by
ipmailmx06.adl6.internode.on.net with ESMTP; 09 Jun 2017 11:40:00 +0930
Given that some belief has been expressed that sourceforge's owner might
be using a subsidiary to threaten its user base, someone might like to
query the support address given in the mail:
Reply-To: "SourceForge.net Support" <sfnet_...@slashdotmedia.com>
That appears to be quite legit. But faking the From address makes it
dishonest spam, I figure, as has also been detected by my ISP:
X-SpamDetect: : -7.500000 IronPort SPAM scanned=-10.0, From isn't in
return path=1.1, 'remove' URL contains an email address=1.4
No matter how fine the link and support reply address look, it was
delivered in a dishonest contaminated envelope. And the moronically
highhanded unsubscribing threat does generally not occur in reality.
Erik
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Emc-users mailing list
Emc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/emc-users
--
Kirk Wallace
http://www.wallacecompany.com/machine_shop/
http://www.wallacecompany.com/E45/
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Emc-users mailing list
Emc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/emc-users
