Re: [mailop] Lots of spam from gmail ?

2018-02-05 Thread Michael Wise via mailop


Such details are available internally, and we're working to make sure that 
significant volumes of this stuff stops leaking.

Based on some of the Office365 reports I'm seeing, some of these miscreants are 
being brought under control.



But the war never ends.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool<http://www.microsoft.com/en-us/download/details.aspx?id=18275> ?



-Original Message-
From: mailop  On Behalf Of Rob Kendrick
Sent: Saturday, February 3, 2018 1:36 AM
To: mailop@mailop.org
Subject: Re: [mailop] Lots of spam from gmail ?



On Sat, Feb 03, 2018 at 12:03:23AM +, Michael Wise wrote:

>

>

> For, “smaller players” the best way is to submit the traffic thru SpamCop.

>

> We get a feed from them, and it’s one more drop in the bucket … but the 
> buckets are looked at by a human.



Could you please add a header for accounts younger than, say, two weeks?

Then I can just drop that stuff on the floor with the rest of the SEO detritus.



B.



___

mailop mailing list

mailop@mailop.org<mailto:mailop@mailop.org>

https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C6ca74e7d450943b2537108d56aeb2c41%7Cee3303d7fb734b0c8589bcd847f1c277%7C1%7C1%7C636532480652875608&sdata=FuVh%2BuHJa0he6Jx4PqgYaFbldo7h%2BfR1flrMTDcDj4E%3D&reserved=0
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-03 Thread Michael Peddemors
+1, while it would be unfair to just drop it, this would help other 
parties be a little more aggressive in analyzing the content..


Same should go for new groups that are freshly created..

However, once word is out, just like domain holders, they will simply 
build up and age a nest of addresses..


But it might catch newbies at the game..

Of course, unfair to just call Google out on this..

(Quick look in the personal spam folder, just from today..)

SEO Spammer(s)..
Return-Path: 
Return-Path: 
Return-Path: 
Return-Path: 
Return-Path: 

From: "Sophia Greg" 
  (however, they are emailing out another companies email platform)


--- And for your weekend reading.. what are the rest? IN no particular 
order


Amazon Bulk Email Marketer(s) (Someone Should get Amazon to force some 
accountability, at least 'rwhois', their IP space is getting worse and 
worse. )


Snowshoe spammer(s) with their own IP space, pretending to be legit 
hosters.. (emerging market spammers)


Leakage from GoDaddy (they have to do better on egress, these are simple 
bot generated emails.. )


Snowshoe Spammers on Friendly Hosting Space (No need to call anyone out 
*cough* OVH et al) Brazilian Spammers like them..


Received: from p38.polos.review (HELO p38.polos.review) (145.239.135.15)
Received: from ad4.integra.fun (HELO ad4.integra.fun) (145.239.135.81)
... 145.239.135.2511   z39.oficialsim.win

Snowshoe Spammers on naive new hosters, with automated systems..

Spam from my registrar trying to upsell me on services.
(Someone tell registrars they shouldn't send marketing via the same 
servers that they need to send important renewal notices out?


Compromised email accounts on government email servers.. (Yo mijp.gov.ve)

And a little bit of static IP space compromises on the IoT devices not 
yet on RBL's..


But now that CryptoMining is so profitable, we see a lot less server 
compromises being used to send spam.. Really surprised we don't see less 
spammers now overall, if I had 500,000 end users CPU's, I wouldn't waste 
it on sending spam ;)


Course, Spam is still the best way to deliver a 'payload' to an end 
user, whether it is Ransomware or CryptoMiners..


And with some of the latest 'zero' days we have seen, you can expect a 
lot more end user complaints... 'My Computer Is running Slow'.. 'My ISP 
is slow'...


Don't worry Kiddies, the ISP's have an even BIGGER plan/pipe to sell you 
that will fix that problem 





On 18-02-03 01:35 AM, Rob Kendrick wrote:

On Sat, Feb 03, 2018 at 12:03:23AM +, Michael Wise wrote:



For, “smaller players” the best way is to submit the traffic thru SpamCop.

We get a feed from them, and it’s one more drop in the bucket … but the buckets 
are looked at by a human.


Could you please add a header for accounts younger than, say, two weeks?
Then I can just drop that stuff on the floor with the rest of the SEO
detritus.

B.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop





--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic

A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-03 Thread Rob Kendrick
On Sat, Feb 03, 2018 at 12:03:23AM +, Michael Wise wrote:
> 
> 
> For, “smaller players” the best way is to submit the traffic thru SpamCop.
> 
> We get a feed from them, and it’s one more drop in the bucket … but the 
> buckets are looked at by a human.

Could you please add a header for accounts younger than, say, two weeks?
Then I can just drop that stuff on the floor with the rest of the SEO
detritus.

B.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-02 Thread Michael Wise via mailop


For, “smaller players” the best way is to submit the traffic thru SpamCop.

We get a feed from them, and it’s one more drop in the bucket … but the buckets 
are looked at by a human.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool<http://www.microsoft.com/en-us/download/details.aspx?id=18275> ?



-Original Message-
From: mailop  On Behalf Of Rob Kendrick
Sent: Friday, February 2, 2018 3:53 PM
To: mailop@mailop.org
Subject: Re: [mailop] Lots of spam from gmail ?



On Fri, Feb 02, 2018 at 05:20:14PM -0500, John Levine wrote:

> In the past few days I've seen a lot of spam from gmail, sleazy SEO

> and the like.  Has someone cracked their signup system?



About 20% of the UCE and spam that reaches my customers' INBOXES is from 
outlook.com or gmail.com.  Obviously reporting it is a waste of time as they're 
both brick walls to smaller players.



B.



___

mailop mailing list

mailop@mailop.org<mailto:mailop@mailop.org>

https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C368773766a394a467dbe08d56a9926e5%7Cee3303d7fb734b0c8589bcd847f1c277%7C1%7C1%7C636532128373107529&sdata=AnCAMSdbrFIc5KeEd7iT%2BIx7naDx4cBptv8VAIWre1I%3D&reserved=0
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-02 Thread Rob Kendrick
On Fri, Feb 02, 2018 at 05:20:14PM -0500, John Levine wrote:
> In the past few days I've seen a lot of spam from gmail, sleazy SEO
> and the like.  Has someone cracked their signup system?

About 20% of the UCE and spam that reaches my customers' INBOXES is from
outlook.com or gmail.com.  Obviously reporting it is a waste of time as
they're both brick walls to smaller players.

B.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-02 Thread Michael Peddemors

On 18-02-02 02:20 PM, John Levine wrote:

In the past few days I've seen a lot of spam from gmail, sleazy SEO
and the like.  Has someone cracked their signup system?


Our filtering team always seems to be chasing those SEO ones down..
Been a problem for months now.. Our personal belief is that Google 
outbound filters treat 'Google SEO' and similar 'top ten on google' with 
a positive bias ;)




--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic

A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-02 Thread Brett Schenker
I've been getting that for quite some time too. At least three months. It
seems to have ramped up in the last three weeks.

Brett

On Fri, Feb 2, 2018 at 5:30 PM, Aaron C. de Bruyn via mailop <
mailop@mailop.org> wrote:

> It's been about a month for me, but my GSuite account has been
> hammered from other GSuite or Gmail accounts and it's all a mix of SEO spam
> and "Hire us for your business website" junk.  Most of it gets filtered,
> but a few per day get into my inbox.
>
> -A
>
>
> On Fri, Feb 2, 2018 at 2:22 PM John Levine  wrote:
>
>> In the past few days I've seen a lot of spam from gmail, sleazy SEO
>> and the like.  Has someone cracked their signup system?
>>
>>
>>
>>
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>>
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
>


-- 
Brett Schenker
Man of Many Things, Including
5B Consulting - http://www.5bconsulting.com
Graphic Policy - http://www.graphicpolicy.com

Twitter - http://twitter.com/bhschenker
LinkedIn - http://www.linkedin.com/in/brettschenker
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-02 Thread Steve Atkins

> On Feb 2, 2018, at 2:30 PM, Aaron C. de Bruyn via mailop  
> wrote:
> 
> It's been about a month for me, but my GSuite account has been hammered from 
> other GSuite or Gmail accounts and it's all a mix of SEO spam and "Hire us 
> for your business website" junk.  Most of it gets filtered, but a few per day 
> get into my inbox.

There's been a steady stream of B2B spam out of there for ages (partly due to 
the lead gen spam outfits whose business model is "give us the keys to your 
google apps account"). No noticeable increase recently, though.

Cheers,
  Steve


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Lots of spam from gmail ?

2018-02-02 Thread Aaron C. de Bruyn via mailop
It's been about a month for me, but my GSuite account has been
hammered from other GSuite or Gmail accounts and it's all a mix of SEO spam
and "Hire us for your business website" junk.  Most of it gets filtered,
but a few per day get into my inbox.

-A


On Fri, Feb 2, 2018 at 2:22 PM John Levine  wrote:

> In the past few days I've seen a lot of spam from gmail, sleazy SEO
> and the like.  Has someone cracked their signup system?
>
>
>
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Lots of spam from gmail ?

2018-02-02 Thread John Levine
In the past few days I've seen a lot of spam from gmail, sleazy SEO
and the like.  Has someone cracked their signup system?




___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop