Of course, it is always hard to tell who/what is injectng the headers,
but while looking at some FuseMail compromised accounts involved in
phishing, noticed this strange set of multiple headers being set in the
email headers, exactly the same..
Have seen this with other poorly written malware and spam, or
misconfigured system, but curious as to this one..
(For the record, phishing link does to Google Docs, via Google Proxy
link.. and those take downs are always slower..)
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
X-PolicySMART: 831245
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
