Re: [Elecraft] Sad News!!! *SCAM* pls ignore it

2010-09-25 Thread Gary Hinson
 _BUMMER!_

Don't worry Guy, it's *definitely* a scam, a very common one at that with
minor variations.  I see it roughly once a month, usually (like this one)
from someone on one of the many work/hobby email reflectors I monitor.

If you receive something like this, are concerned and want to check it out,
I recommend that you search for information at Snopes.com which is a
reliable source.  Searching Snopes for the phrase tears in my eyes turned
up this page: http://www.snopes.com/fraud/distress/family.asp

It looks to me as if Bob's email account has been compromised by the
scammers, most likely due to a virus on his PC but possibly due to Bob using
a weak password on the email account.  I'm trying to get in touch with Bob
via my ham friends in the UK.

73,
Gary
ZL2iFB and security awareness freak by day


__
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Elecraft@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html


Re: [Elecraft] Sad News!!! *SCAM* pls ignore it

2010-09-25 Thread Ron D'Eau Claire
Often it has nothing to do with the person whose e-mail address is used. If
he has ever exchanged e-mails with someone who has an infected computer, it
can just as easily come from there according to the folks at my ISP. 

Often the virus looks through the e-mail addresses stored on the machine
it has infected and chooses one at random to spoof as the originator. It may
use a number of addresses it finds on that machine but seldom the actual
e-mail address associated with that user. 

Ron AC7AC



-Original Message-

It looks to me as if Bob's email account has been compromised by the
scammers, most likely due to a virus on his PC but possibly due to Bob using
a weak password on the email account.  I'm trying to get in touch with Bob
via my ham friends in the UK.

73,
Gary
ZL2iFB and security awareness freak by day

__
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Elecraft@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html


Re: [Elecraft] Sad News!!! *SCAM* pls ignore it

2010-09-25 Thread Ron D'Eau Claire
On Sat, Sep 25, 2010 at 04:12:25PM -0700 I heard the voice of
Ron D'Eau Claire, and lo! it spake thus:
 
 Often the virus looks through the e-mail addresses stored on the
 machine it has infected and chooses one at random to spoof as the
 originator.

Remember (or, well, learn for the first time if you're not a nerd),
the From: header in emails means exactly nothing as far as determining
where the mail came from.  It's purely cosmetic, and trivially
settable, as evinced by looking at the From: on this mail (hint: I'm
not actually Ron  :).

So the From: on a scam email doesn't mean anything other than
whatever person or program sent this happened to see that email
address somewhere somehow, and decided to use it as the From:.  No
need for it to ever have been within a thousand miles of any system
actually associated with that person.  Of course, they often DO come
from either local infection of that person's system, or a system of a
correspondent of theirs that has the address sitting in their address
book just waiting to be harvested, but that's just a way of finding a
handy address to claim, not a requirement of any sort for sticking it
on the mail.


-- 
Matthew Fuller, N3TZJ
n3...@n3tzj.org
__
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Elecraft@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html


Re: [Elecraft] Sad News!!! *SCAM* pls ignore it

2010-09-25 Thread Bill K9YEQ
Ron,

That is all it is.  A virus in the email program sends a message to  all in
the address book.  This is why some ISP's or internet web services only
allow a limited # of emails to be sent at once.  

Bill
K9YEQ


-Original Message-
From: elecraft-boun...@mailman.qth.net
[mailto:elecraft-boun...@mailman.qth.net] On Behalf Of Ron D'Eau Claire
Sent: Saturday, September 25, 2010 6:12 PM
To: 'Gary Hinson'; elecraft@mailman.qth.net
Subject: Re: [Elecraft] Sad News!!! *SCAM* pls ignore it

Often it has nothing to do with the person whose e-mail address is used. If
he has ever exchanged e-mails with someone who has an infected computer, it
can just as easily come from there according to the folks at my ISP. 

Often the virus looks through the e-mail addresses stored on the machine
it has infected and chooses one at random to spoof as the originator. It may
use a number of addresses it finds on that machine but seldom the actual
e-mail address associated with that user. 

Ron AC7AC



-Original Message-

It looks to me as if Bob's email account has been compromised by the
scammers, most likely due to a virus on his PC but possibly due to Bob using
a weak password on the email account.  I'm trying to get in touch with Bob
via my ham friends in the UK.

73,
Gary
ZL2iFB and security awareness freak by day

__
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Elecraft@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

__
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Elecraft@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html


Re: [Elecraft] Sad News!!! *SCAM* pls ignore it [END of Thread]

2010-09-25 Thread Eric Swartz - WA6HHQ, Elecraft
  END of this thread and all related ones under various similar subject 
lines.

73, Eric
Elecraft Moderator

On 9/25/2010 4:28 PM, Ron D'Eau Claire wrote:
 On Sat, Sep 25, 2010 at 04:12:25PM -0700 I heard the voice of
 Ron D'Eau Claire, and lo! it spake thus:
 Often the virus looks through the e-mail addresses stored on the
 machine it has infected and chooses one at random to spoof as the
 originator.
 Remember (or, well, learn for the first time if you're not a nerd),
 the From: header in emails means exactly nothing as far as determining
 where the mail came from.  It's purely cosmetic, and trivially
 settable, as evinced by looking at the From: on this mail (hint: I'm
 not actually Ron  :).

 So the From: on a scam email doesn't mean anything other than
 whatever person or program sent this happened to see that email
 address somewhere somehow, and decided to use it as the From:.  No
 need for it to ever have been within a thousand miles of any system
 actually associated with that person.  Of course, they often DO come
 from either local infection of that person's system, or a system of a
 correspondent of theirs that has the address sitting in their address
 book just waiting to be harvested, but that's just a way of finding a
 handy address to claim, not a requirement of any sort for sticking it
 on the mail.


__
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Elecraft@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html