Re: Fake get_iplayer mail
On Mon, Nov 12, 2018 at 05:56:19PM +, Az wrote: [...] > I expect someone got into the mailing list at some point and harvested email > addresses. There is a public archive of this mailing list, and spammers would have just scraped it for addresses as part of their general nefarious web crawling. They don't need to have "got into the mailing list". ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
Hi I purposely haven't clicked on the links, as I suspected that they will probably do something nasty, It looks like I will keep deleting, or maybe report them as spam Luckily this is not my primary email account therefore not giving me too much grief. Anyway thanks for all your input. Dave -- Original Message -- From: "CJB" To: "Vangelis forthnet" Cc: get_iplayer@lists.infradead.org Sent: 12/11/2018 16:51:43 Subject: Re: Fake get_iplayer mail It appears that the spam is not actually coming from this list per se. The spam emails seem to have a From or Subject as 'get_iplayer' But the origin (looking at the raw headers) is nothing to do with get_iplayer. BTW clicking on any embedded link could well place a trojan virus on one's device. CJB On 12/11/2018, Vangelis forthnet wrote: On Mon Nov 12 15:26:36 GMT 2018, artisticforge Niemand wrote: I have seen about 12 dozen in the last month. Hi Terry :-) ; 144 spam e-mails in the course of a month is an auful lot, TBH ... :-( I surmise this is with your gmail account ? My e-mail account is not free webmail, but provided by my ISP, as part of their service; they do filter spam adequately before it even reaches my inbox... I am pleased I don't get spam from this list, given that my e-mail address (as much as any other member's) is human readable in both iterations of the list archives... Best wishes ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
Hi Mark, FYI I am not receiving the mails via google, but via my orange.fr email account, they obviously don't do as much checking as google. Dave -- Original Message -- From: "Mark Carroll" To: "get_iplayer" Sent: 12/11/2018 16:55:07 Subject: Re: Fake get_iplayer mail On 12 Nov 2018, Dave Widgery wrote: ULiSI3Tr51s4VgAA7xAy+w ; Sun, 11 Nov 2018 09:42:28 +0100,from p-a2qyv4gx.bestdivorcelawyermontgomery.com ([37.212.82.130]) by c-2idzjrjm.hazelvieworchards.ca ([14.247.186.25]) by mwinf5c34 with ME id yYo41y00M0ZJY2N01YoBFw; Sun, 11 Nov 2018 09:48:13 +0100 Both these subnets appear on the level 1 blacklist from UCEPROTECT: in the dnsbl-1 file that I download from uceprotect.net. That explains why they never got to my mail system. Sorry to hear that Google's spam-blocking isn't also catching them! -- Mark ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
On Monday 12 November 2018 14:55, Dave Widgery : > Hi > > Sorry if this is a bit off topic, but recently I have been getting quite a > lot (4-5 a > week) of emails pretending to be from get_iplayer, sometimes they show > get_iplayer in > the address field sometime there are one or more letters changed for example > get_xplryer > or get_iplaygr. > > The strange this is that I am not getting these on my current registered > get_iplayer > email address, but on a different address that I stopped using with > get_iplayer a few > years ago. > > I wondered if anyone else has experienced this? I am not sure if the mails > are > malicious or just spam as I have just deleted them without opening them. > > Regards > Dave I expect someone got into the mailing list at some point and harvested email addresses. What you can do about it depends largely on your OS and email setup. For windows, if you can set filters in your client to check that spam header or anything else that looks suspicious it might help. For anything *nix use something like spamassassin and forward your mail to it and/or the same with procmail as the first step. I maintain an SMTP server so I'm used to seeing 100s of these every week. Using block lists and greylisting helps to cut out 99% of it. -- Az ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
sorry I hate spell checker on e-mail. I meant a dozen, 12 spam e-mails, I did not mean 144 spam e-mails. the 12 e-mails were just random porn sites and get-rich-quick scams. I am far closer to grave than the cradle and "hi, I am Jennifer and I want to be your love bug!" just does not get there. After a certain age your a monk whether you like it or not. besides my body is just too broken and damaged. On Mon, Nov 12, 2018 at 9:46 AM Vangelis forthnet wrote: > > On Mon Nov 12 15:26:36 GMT 2018, artisticforge Niemand wrote: > > > I have seen about 12 dozen in the last month. > > Hi Terry :-) ; > > 144 spam e-mails in the course of a month > is an auful lot, TBH ... :-( > I surmise this is with your gmail account ? > > My e-mail account is not free webmail, > but provided by my ISP, as part of their service; > they do filter spam adequately before > it even reaches my inbox... > > I am pleased I don't get spam from this > list, given that my e-mail address (as much > as any other member's) is human readable > in both iterations of the list archives... > > Best wishes > > > ___ > get_iplayer mailing list > get_iplayer@lists.infradead.org > http://lists.infradead.org/mailman/listinfo/get_iplayer -- terry l. ridder ><> ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
On 12 Nov 2018, Dave Widgery wrote: > ULiSI3Tr51s4VgAA7xAy+w ; Sun, 11 Nov 2018 09:42:28 +0100,from > p-a2qyv4gx.bestdivorcelawyermontgomery.com ([37.212.82.130]) by > c-2idzjrjm.hazelvieworchards.ca ([14.247.186.25]) by mwinf5c34 with ME > id yYo41y00M0ZJY2N01YoBFw; Sun, 11 Nov 2018 09:48:13 +0100 Both these subnets appear on the level 1 blacklist from UCEPROTECT: in the dnsbl-1 file that I download from uceprotect.net. That explains why they never got to my mail system. Sorry to hear that Google's spam-blocking isn't also catching them! -- Mark ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
On 12/11/2018 14:55, Dave Widgery wrote: The strange this is that I am not getting these on my current registered get_iplayer email address, but on a different address that I stopped using with get_iplayer a few years ago. So, it sounds like an old copy of the subscriber list is in circulation. I suspect that at some point in the past the subscriber list was available to members (and not just the list administrator as it is now) rather than the list server having being hacked. It happens. It's like all those "we've hacked your PC, got video of you wanking, and to prove it here's your password, send us money". Yup, it's definitely a password I used to use, somewhere, I can tell from the format so that's another site I used to use has had it's customer email and authentication details pinched in some way. Shrug. Moving on. -- Paul ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
It appears that the spam is not actually coming from this list per se. The spam emails seem to have a From or Subject as 'get_iplayer' But the origin (looking at the raw headers) is nothing to do with get_iplayer. BTW clicking on any embedded link could well place a trojan virus on one's device. CJB On 12/11/2018, Vangelis forthnet wrote: > On Mon Nov 12 15:26:36 GMT 2018, artisticforge Niemand wrote: > >> I have seen about 12 dozen in the last month. > > Hi Terry :-) ; > > 144 spam e-mails in the course of a month > is an auful lot, TBH ... :-( > I surmise this is with your gmail account ? > > My e-mail account is not free webmail, > but provided by my ISP, as part of their service; > they do filter spam adequately before > it even reaches my inbox... > > I am pleased I don't get spam from this > list, given that my e-mail address (as much > as any other member's) is human readable > in both iterations of the list archives... > > Best wishes > > > ___ > get_iplayer mailing list > get_iplayer@lists.infradead.org > http://lists.infradead.org/mailman/listinfo/get_iplayer > ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
On Mon Nov 12 15:26:36 GMT 2018, artisticforge Niemand wrote: I have seen about 12 dozen in the last month. Hi Terry :-) ; 144 spam e-mails in the course of a month is an auful lot, TBH ... :-( I surmise this is with your gmail account ? My e-mail account is not free webmail, but provided by my ISP, as part of their service; they do filter spam adequately before it even reaches my inbox... I am pleased I don't get spam from this list, given that my e-mail address (as much as any other member's) is human readable in both iterations of the list archives... Best wishes ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
On 12 Nov 2018, Az wrote: > Weird. Not had that before. Is there anything significant in the > headers to e.g. show their path and origin? I could check if the IP of the sender gets redirected to a tarpit by my firewall. -- Mark ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
kqfesmhdtjeepfedtjeenucfhrhhomhepfdhgvghtpgigphhlrhihvghrfdcuoefhohhnkhhskhhoohhsthestgdqvdhiugiijhhrjhhmrdhhrgiivghlvhhivgifohhrtghhrghrughsrdgtrgeqnecukfhppedugedrvdegjedrudekiedrvdehnecurfgrrhgrmhephhgvlhhopegtqddvihguiihjrhhjmhdrhhgriigvlhhvihgvfihorhgthhgrrhgushdrtggrpdhinhgvthepudegrddvgeejrddukeeirddvhedpmhgrihhlfhhrohhmpehfohhnkhhskhhoohhsthestgdqvdhiugiijhhrjhhmrdhhrgiivghlvhhivgifohhrtghhrghrughsrdgtrgdprhgtphhtthhopeifihgughgvrhihrdgurghvihgusehorhgrnhhgvgdrfhhrnecuvehluhhsthgvrhfuihiivgeptd X-873116CBB : 0A160508B21624 Thread-Topic : Trulgreft X-A46B5373 : 289812C8B56AA7A3 Return-Path : X-Swooctbley : 0373CC3390769C7856 X-01AA9 : CA21 -- Original Message -- From: "Mark Carroll" To: "get_iplayer" Sent: 12/11/2018 16:07:33 Subject: Re: Fake get_iplayer mail On 12 Nov 2018, Dave Widgery wrote: Sorry if this is a bit off topic, but recently I have been getting quite a lot (4-5 a week) of emails pretending to be from get_iplayer, I hadn't had any seeming to be from get_iplayer since Richard's on November 4th though I do block some known spam senders before they would even hit a junk mail folder so I wouldn't necessarily even know if my filtering had caught subsequent e-mail. -- Mark ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
I have seen about 12 dozen in the last month. the get_iplayer was jumbled or deliberately obscured . about half were for porn sites and 6 for get rich quick scams. you know the ones. "Dear Sir; I have $xxMillion USD in an African Bank". On Mon, Nov 12, 2018 at 8:56 AM Dave Widgery wrote: > > Hi > > Sorry if this is a bit off topic, but recently I have been getting quite > a lot (4-5 a week) of emails pretending to be from get_iplayer, > sometimes they show get_iplayer in the address field sometime there are > one or more letters changed for example get_xplryer or get_iplaygr. > > The strange this is that I am not getting these on my current registered > get_iplayer email address, but on a different address that I stopped > using with get_iplayer a few years ago. > > I wondered if anyone else has experienced this? I am not sure if the > mails are malicious or just spam as I have just deleted them without > opening them. > > Regards > Dave > > > --- > This email has been checked for viruses by Avast antivirus software. > https://www.avast.com/antivirus > > > ___ > get_iplayer mailing list > get_iplayer@lists.infradead.org > http://lists.infradead.org/mailman/listinfo/get_iplayer -- terry l. ridder ><> ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
On 12 Nov 2018, Dave Widgery wrote: > Sorry if this is a bit off topic, but recently I have been getting quite > a lot (4-5 a week) of emails pretending to be from get_iplayer, I hadn't had any seeming to be from get_iplayer since Richard's on November 4th though I do block some known spam senders before they would even hit a junk mail folder so I wouldn't necessarily even know if my filtering had caught subsequent e-mail. -- Mark ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
Re: Fake get_iplayer mail
On Monday 12 November 2018 14:55, Dave Widgery put forth the proposition: > Hi > > Sorry if this is a bit off topic, but recently I have been getting quite a > lot (4-5 a > week) of emails pretending to be from get_iplayer, sometimes they show > get_iplayer in > the address field sometime there are one or more letters changed for example > get_xplryer > or get_iplaygr. > > The strange this is that I am not getting these on my current registered > get_iplayer > email address, but on a different address that I stopped using with > get_iplayer a few > years ago. > > I wondered if anyone else has experienced this? I am not sure if the mails > are > malicious or just spam as I have just deleted them without opening them. > > Regards > Dave Weird. Not had that before. Is there anything significant in the headers to e.g. show their path and origin? -- Az ___ get_iplayer mailing list get_iplayer@lists.infradead.org http://lists.infradead.org/mailman/listinfo/get_iplayer
