Re: [mailop] Sendgrid and phishing

2020-06-18 Thread Jay Hennigan via mailop
On 6/18/20 07:52, Michael Peddemors via mailop wrote: From: "Netflix" How is that not already a check on egress after a couple of months.. Do you REALLY think you are going to have a customer who named themselves that using your service? Inquiring minds want to know... Follow the money.

Re: [mailop] Sendgrid and phishing

2020-06-18 Thread Michael Peddemors via mailop
On 2020-06-17 11:31 p.m., Benoît Panizzon via mailop wrote: Hi Anybody else seeing increase phishing through sendgrid?  They look fairly convincing. I suspect the IP Ranges of Sendgrid are bound for a global blacklisting if they keep ignoring abusive behaviour of their customers. We have

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Benoît Panizzon via mailop
Hi > Anybody else seeing increase phishing through sendgrid?  They look > fairly convincing. > > A few paypals, and a few amazons. Add Netflix Add Joe-Jobs > I thought sendgrid were ok?    Has somebody leaked a big pile of > sendgrid usernames and passwords or something? Yes, I contacted the

Re: [mailop] SendGrid and Phishing

2020-06-17 Thread Len Shneyder via mailop
Something is a little off with the auto-responder we tested it last week and it was working, just ran a test now and nothing yet so we'll dig into that. In the meantime we are receiving anything you send to ab...@sendgrid.com Len Shneyder VP Industry Relations [image: Twilio]

Re: [mailop] SendGrid and Phishing

2020-06-17 Thread Faisal Misle via mailop
I’ve had mixed luck... sometimes it auto replies, sometimes it doesn’t. I sometimes wonder if their Proofpoint gateway is quarantining them - or if they added a bypass rule for their abuse mailbox (as it should be) Best, Faisal PGP Key: [C8FD029B](https://pgp.faisal.ec/) On Wed, Jun 17, 2020 a

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Jesse Thompson via mailop
On 6/17/20 1:50 PM, Robert L Mathews via mailop wrote: > Several months ago I suggested (among other things) that SendGrid block > "From" headers matching prominent domain names until the messages have > been manually reviewed. The fact that "don't let random customers send > mail saying it's from

Re: [mailop] SendGrid and Phishing

2020-06-17 Thread Len Shneyder via mailop
Yep, that's strange. It should kick off an autoresponder. I'll look into that. If you have fresh headers you can share with me I'd appreciate it. Thank you very much! -L Len Shneyder VP Industry Relations [image: Twilio] EMAIL l...@twilio.co

Re: [mailop] SendGrid and Phishing

2020-06-17 Thread Tim Bray via mailop
On 17/06/2020 16:01, Len Shneyder via mailop wrote: Hi All, Appreciate the discussion. As was mentioned in another forum we are aware of the problem—the entire time is engaged in deploying a comprehensive fix that will prevent a wave like this in the future. Just to be perfectly clear, there

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Robert L Mathews via mailop
On 6/17/20 10:22 AM, Carl Byington via mailop wrote: > In the last 24 hours: Yeah, I see phishing attempts that we rejected for DMARC failures like: Received: from microsoft.com (unknown) by ismtpd0004p1lon1.sendgrid.net (SG) with ESMTP id PP-Z30gTRGS8qMv1NXRDhA for ; Tue, 16 Jun 2020 06:55

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Carl Byington via mailop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wed, 2020-06-17 at 08:55 -0500, Michael Rathbun via mailop wrote: > > Pointing out to users reporting these that blocking Sendgrid > entirely > (the temptation arises) would take out the SG traffic that is highly > desired (at least 70%). Two mon

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Alan Hodgson via mailop
On Wed, 2020-06-17 at 08:55 -0500, Michael Rathbun via mailop wrote: > On Wed, 17 Jun 2020 14:00:35 +0100, Tim Bray via mailop w > rote: > > Anybody else seeing increase phishing through sendgrid? They look fairly > > convincing. > > General spam (several per week) and phishing, especially some v

[mailop] SendGrid and Phishing

2020-06-17 Thread Len Shneyder via mailop
-- Message: 1 Date: Wed, 17 Jun 2020 14:00:35 +0100 From: Tim Bray To: mailop Subject: [mailop] Sendgrid and phishing Message-ID: <1f6aca35-94ef-70a0-bd75-49a5d632d...@kooky.org> Content-Type: text/plain; charset=utf-8; format=flowed Hi, Anybod

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Michael Rathbun via mailop
On Wed, 17 Jun 2020 14:00:35 +0100, Tim Bray via mailop wrote: >Anybody else seeing increase phishing through sendgrid?  They look >fairly convincing. General spam (several per week) and phishing, especially some very nicely done "Reconfirm you Netflix payment method" at several per day. Point

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Michael Peddemors via mailop
Going on two months since first reported, and last weekend was really high counts of new Send Grid IP(s) sending obvious phishing.. On 2020-06-17 6:26 a.m., Faisal Misle via mailop wrote: I’ve been seeing it too... Mailgun, PayPal, etc A SG rep replied to a SDLU thread yesterday about the sa

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Olivier Depuydt via mailop
Hello. I received the Phishing email from the fake Paypal Support, from Sendgrid's platform on May the 29th, on a personal email address. I have forwarded it to Paypal's phishing support on June the 1srt. So, this issue has weeks if you still see emails like that. Best regards, Olivier Deliverab

Re: [mailop] Sendgrid and phishing

2020-06-17 Thread Faisal Misle via mailop
I’ve been seeing it too... Mailgun, PayPal, etc A SG rep replied to a SDLU thread yesterday about the same issue “We are working to get a handle on this on a few fronts. These senders in this thread have been banned. I don't have insight into the compliance side, but it is being worked on." Best

[mailop] Sendgrid and phishing

2020-06-17 Thread Tim Bray via mailop
Hi, Anybody else seeing increase phishing through sendgrid?  They look fairly convincing. A few paypals, and a few amazons. I thought sendgrid were ok?    Has somebody leaked a big pile of sendgrid usernames and passwords or something? -- Tim Bray Huddersfield, GB t...@kooky.org ___