Re: Compromised squareup/amazonses account phish

2018-06-14 Thread David Jones
On 06/13/2018 02:20 PM, Alex wrote: Hi, This phish appears to have been routed through Amazon but DKIM signed by squareup. Is this a compromised squareup.com account? https://pastebin.com/CxvULHF6 From 01000163fa173c6b-7d47b00d-af5c-4755-b203-74392b57ec3d-000...@amazonses.com Wed Jun 13 13:

Re: Compromised squareup/amazonses account phish

2018-06-13 Thread Bill Cole
On 13 Jun 2018, at 15:20 (-0400), Alex wrote: Hi, This phish appears to have been routed through Amazon but DKIM signed by squareup. Is this a compromised squareup.com account? For a loose definition of "compromised," yes. Possession of a Square account is not evidence of ethical integrity.

Compromised squareup/amazonses account phish

2018-06-13 Thread Alex
Hi, This phish appears to have been routed through Amazon but DKIM signed by squareup. Is this a compromised squareup.com account? https://pastebin.com/CxvULHF6 >From 01000163fa173c6b-7d47b00d-af5c-4755-b203-74392b57ec3d-000...@amazonses.com Wed Jun 13 13:00:20 2018 From: INVOICE# Reply-To: "A