Re: MailChimp with link to javascript/zip malware

2017-10-17 Thread Bill Cole
On 17 Oct 2017, at 15:42, David Jones wrote: How did Mailchimp respond to your abuse report? If they quickly handled it, then I see no need to remove them from the local whitelist. They have a serious interest to keep their reputation intact so they should handle this rogue customer of

Re: MailChimp with link to javascript/zip malware

2017-10-17 Thread Rupert Gallagher
We have a server-side filter that drops MC into "/Junk/massmail/", being a folder we train people to ignore, unless they are looking for something specific. We do reject any massmail that links to scripts or zipped stuff. Blacklists and whitelists play no role whatsoever here. Sent from

Re: MailChimp with link to javascript/zip malware

2017-10-17 Thread David Jones
On 10/17/2017 02:14 PM, Alex wrote: Hi, Another email from a whitelisted mailchimp address that contains malware. https://pastebin.com/ay83iWjC It's also not tagged when not whitelisted, and I hoped someone had some ideas on what further can be done to block it. Complicating things, it's in

MailChimp with link to javascript/zip malware

2017-10-17 Thread Alex
Hi, Another email from a whitelisted mailchimp address that contains malware. https://pastebin.com/ay83iWjC It's also not tagged when not whitelisted, and I hoped someone had some ideas on what further can be done to block it. Complicating things, it's in Italian. I've reported it to

Re: FROM header with two email addresses

2017-10-17 Thread RW
On Mon, 16 Oct 2017 13:19:06 -0400 Mark London wrote: > Hi - I received a spam message with the following double From address: > > From: struth...@psfc.mit.edu, "Lorraine M." > > > But neither of the 2 previously suggested rules were triggered by > it. I'm sure a