Re: [mailop] Massive Spam Incident @ Outlook.com?

2022-10-16 Thread Carl Byington via mailop
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Wed, 2022-10-12 at 13:01 +, Slavko via mailop wrote:
> I did some experiments with that (not mail related) in past and most
> often
> user's response was something as -- "They are big, they are doing
> things
> right!" The most of us known, that "big" and "right" are independent
> cases...

Google for "MS365 ECB" and point them to any of the many articles about
the issue. Yes, MS is big, but it does not prevent them from doing
brain-dead things.


-BEGIN PGP SIGNATURE-

iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCY0yYWRUcY2FybEBmaXZl
LXRlbi1zZy5jb20ACgkQL6j7milTFsENpwCfY+yRebsjwh5ggT0k+2P9oz102SMA
nA9Snc6IGi8UmOXQQYJ7iTWE+2FH
=I/o5
-END PGP SIGNATURE-



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Massive Spam Incident @ Outlook.com?

2022-10-12 Thread Slavko via mailop
Dňa 12. októbra 2022 11:54:16 UTC používateľ "Laurent S. via mailop" 
 napísal:

>Obviously, our team is always blamed in such case and I am still waiting for 
>the day that a microsoft client complain to microsoft about delivery issues 
>and not to us.

They will do not stop complaining to you, until you don't stop solving MS's
issues. Or, at least, untill you do not start pointing them, that you can solve
it with server's admins only. But i afraid, that this will never happen...

I did some experiments with that (not mail related) in past and most often
user's response was something as -- "They are big, they are doing things
right!" The most of us known, that "big" and "right" are independent
cases...

regards



-- 
Slavko
https://www.slavino.sk/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Massive Spam Incident @ Outlook.com?

2022-10-12 Thread Laurent S. via mailop
This spam wave started to my knowledge early september from other servers. 
Starting around 2022-09-25 it also affected MS365 senders.

The URIs have some patterns that helps blocking them without too much 
difficulty with no known FPs on our platform.

To their credit, they are good at avoiding traps.

While is it easy to completely block most servers sending those spam, the usual 
snowshoe method of MS365 makes IP blocking/scoring with quite some collateral 
damage (very much deserved). Obviously, our team is always blamed in such case 
and I am still waiting for the day that a microsoft client complain to 
microsoft about delivery issues and not to us.

The number of compromised MS365 account kept increasing a lot, up to reaching a 
point were it was hard to justify allowing any mail coming from those ranges. 
The reputation hit will be hard to recover. Especially as we dutifully rejected 
almsot all of those spam with a clear message. Outbound monitoring is clearly 
not a selling argument to use MS365. 

> Impossible to say whether the spammer just got tired, or MS found an 
> effective way to stop them.

While the spam greatly reduced since this week-end, it keeps coming. Some with 
slightly changed pattern, some with the same old patterns that should have been 
blocked two weeks ago.

Best regards,
Laurent
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Massive Spam Incident @ Outlook.com?

2022-10-12 Thread Hans-Martin Mosner via mailop

Am 10.10.22 um 15:25 schrieb Benoît Panizzon via mailop:

Hi Team

Anyone else observing an absurd increase of 'erotica' related spam
mails, most probably sent over phished Outlook.com accounts over the last 
couple of days?


On the account most affected by this, the wave seems to have stopped around 
17:15 UTC yesterday.

Impossible to say whether the spammer just got tired, or MS found an effective 
way to stop them.

Cheers,
Hans-Martin

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop