[sniffer]Ebay Phishing Emails getting through
Has anyone else been getting an excess amount of ebay phishing emails making it through sniffer today? I have personally received a couple of them and have multiple users reporting the same. I have forwarded them to the sniffer spam@ address if you can take a look Pete it would be much appreciated. Thank You, Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
Re: [sniffer]Ebay Phishing Emails getting through
I have not see any. Herb Jim Matuska Jr. wrote: Has anyone else been getting an excess amount of ebay phishing emails making it through sniffer today? I have personally received a couple of them and have multiple users reporting the same. I have forwarded them to the sniffer spam@ address if you can take a look Pete it would be much appreciated. Thank You, Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]> -- Herb Guenther Lanex, LLC www.lanex.com (262)789-0966x102 Office (262)780-0424 Direct This e-mail is confidential and is for the use of the intended recipient(s)only. If you are not an intended recipient please advise us of our error by return e-mail then delete this e-mail and any attached files. You may not copy, disclose or use the contents in any way. # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
Re: [sniffer]Ebay Phishing Emails getting through
We have not noticed any today. Michael Stein Computer House - Original Message - From: "Jim Matuska Jr." <[EMAIL PROTECTED]> To: "Message Sniffer Community" Sent: Wednesday, May 17, 2006 2:46 PM Subject: [sniffer]Ebay Phishing Emails getting through Has anyone else been getting an excess amount of ebay phishing emails making it through sniffer today? I have personally received a couple of them and have multiple users reporting the same. I have forwarded them to the sniffer spam@ address if you can take a look Pete it would be much appreciated. Thank You, Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]> # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
Re: [sniffer]Ebay Phishing Emails getting through
I've gotten one myself. The pharmacy ones, are still coming through too for that matter. > -Original Message- > From: Message Sniffer Community > [mailto:[EMAIL PROTECTED] On Behalf Of Herb Guenther > Sent: Wednesday, May 17, 2006 3:03 PM > To: Message Sniffer Community > Subject: Re: [sniffer]Ebay Phishing Emails getting through > > I have not see any. > > Herb > > Jim Matuska Jr. wrote: > > Has anyone else been getting an excess amount of ebay > phishing emails making > > it through sniffer today? I have personally received a > couple of them and > > have multiple users reporting the same. I have forwarded > them to the > > sniffer spam@ address if you can take a look Pete it would be much > > appreciated. > > > > Thank You, > > > > Jim Matuska Jr. > > Computer Tech2, CCNA > > Nez Perce Tribe > > Information Systems > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > # > > This message is sent to you because you are subscribed to > > the mailing list . > > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > > To switch to the INDEX mode, E-mail to > <[EMAIL PROTECTED]> > > Send administrative queries to <[EMAIL PROTECTED]> > > > > > > -- > Herb Guenther > Lanex, LLC > www.lanex.com > (262)789-0966x102 Office > (262)780-0424 Direct > > > This e-mail is confidential and is for the use of the > intended recipient(s)only. If you are not an intended > recipient please advise us of our error by return e-mail then > delete this e-mail and any attached files. You may not copy, > disclose or use the contents in any way. > > > > > # > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
Re: [sniffer]Ebay Phishing Emails getting through
Hello Jim, Wednesday, May 17, 2006, 2:46:48 PM, you wrote: > Has anyone else been getting an excess amount of ebay phishing emails making > it through sniffer today? I have personally received a couple of them and > have multiple users reporting the same. I have forwarded them to the > sniffer spam@ address if you can take a look Pete it would be much > appreciated. Ah... So the list is working :-) I'll have to update the signup instructions... I can check that off the list. Today, starting at about 0100 E, the blackhats really took it up a notch. I know because I was on duty making rules at the time. One of the things I saw a lot of were new phishing attacks - all varieties and variants. I know the team has been pushing hard on these, but some are bound to get through on the first few passes. Another thing we've noticed in the grand scheme is that localized phishing attacks are becoming more common. These are less likely to hit our spamtraps since the target lists used are highly regional -- so if we don't have a spamtrap in that geography our view of the spam may be delayed. We're working on this problem on a number of fronts.. Ideas, as always, are welcome. Certainly, submitting samples to spam@ (or preferably your local spam submission point polled by our bots) will put these messages in front of us if we have not already created rules for them. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
[sniffer]Re[2]: [sniffer]Ebay Phishing Emails getting through
Hello Daniel, Wednesday, May 17, 2006, 3:07:38 PM, you wrote: > I've gotten one myself. > The pharmacy ones, are still coming through too for that matter. Here is what the latest wave has looked like from here (attached image). You can see, starting about 24 hours ago a jagged, but fairly regular climbing series of spikes. Each is a new wave of variants on the current campaigns. Most notably, the "the medications" drug spam, chatty drugs, russian porn, phishing (especially localized versions), and stuff-for-free* surveys. Of course a variety of the usual players is well mixed in. During the previous 24 hours things were _relatively_ quiet. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. getchart.jsp.png Description: PNG image # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
Re: [sniffer]Ebay Phishing Emails getting through
> Certainly, submitting samples to spam@ (or preferably your > local spam submission point polled by our bots) will put > these messages in front of us if we have not already created > rules for them. I've just manually submitted the ~35 messages that my filters triggered on for phishing that didn't trigger Message Sniffer today but ended up in my HOLD folder anyway due to their total spamminess. Most of them are against eBay and came from Germany. Andrew 8) > -Original Message- > From: Message Sniffer Community > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > Sent: Wednesday, May 17, 2006 12:53 PM > To: Message Sniffer Community > Subject: Re: [sniffer]Ebay Phishing Emails getting through > > Hello Jim, > > Wednesday, May 17, 2006, 2:46:48 PM, you wrote: > > > Has anyone else been getting an excess amount of ebay > phishing emails > > making it through sniffer today? I have personally > received a couple > > of them and have multiple users reporting the same. I have > forwarded > > them to the sniffer spam@ address if you can take a look > Pete it would > > be much appreciated. > > > > Ah... So the list is working :-) I'll have to update the > signup instructions... I can check that off the list. > > > > Today, starting at about 0100 E, the blackhats really took it > up a notch. I know because I was on duty making rules at the time. > > One of the things I saw a lot of were new phishing attacks - > all varieties and variants. > > I know the team has been pushing hard on these, but some are > bound to get through on the first few passes. > > Another thing we've noticed in the grand scheme is that > localized phishing attacks are becoming more common. These > are less likely to hit our spamtraps since the target lists > used are highly regional -- so if we don't have a spamtrap in > that geography our view of the spam may be delayed. We're > working on this problem on a number of fronts.. > Ideas, as always, are welcome. > > Certainly, submitting samples to spam@ (or preferably your > local spam submission point polled by our bots) will put > these messages in front of us if we have not already created > rules for them. > > _M > > -- > Pete McNeil > Chief Scientist, > Arm Research Labs, LLC. > > > # > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
