On Mon, Aug 25, 2014 at 01:40:21PM -0700, Evan Platt wrote:
> rhdyes, Your account has been comprmised. Change your password ASAP. TO all
> others, do not click that link.
It has not. The From: header was simply forged. The compromised
host is most likely sinos.net, not the Gmail account of rhdyes.
More importantly, please DO NOT AMPLIFY any junk mail posted to
this list. Just delete it without further comment, even if it
contains links to malware. Thanks.
--
Viktor.
Received: from smtp.sinos.net (smtp.sinos.net [200.160.158.145])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by camomile.cloud9.net (Postfix) with ESMTPS id 7ACDA33A150
for <postfix-us...@cloud9.net>; Mon, 25 Aug 2014 16:36:58 -0400 (EDT)
Received: by smtp.sinos.net (Postfix, from userid 100)
id 73719333D5E; Mon, 25 Aug 2014 17:36:55 -0300 (BRT)
Received: from sinos.net (unknown [190.57.237.2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by smtp.sinos.net (Postfix) with ESMTP id A17E3332707
for <postfix-us...@cloud9.net>; Mon, 25 Aug 2014 17:36:52 -0300 (BRT)
Subject: from: rhd...@gmail.com
From: "rhd...@gmail.com" <rhd...@gmail.com>
Message-Id: <b3a1fdb0-31e7-4270-c887-62f6db260...@sinos.net>
