The email came from someone in our organization who was asking us to
forward any suspicious attachment by clicking on it and saving it before
forwarding it on.
My reaction was that this was another attempt to get all the recipients to
click on something dangerous.
I immediately sent an email to
Wayne Bickerdike wrote:
>My "spoof" email was apparently genuine. The
>person who sent it has no idea
>how much he got wrong with the request.
Eh? Can you elaborate? First sentence makes no sense. It was spoofed or it
wasn't?!
--
zMan -- "I've got a mainframe and I'm not afraid to use it"
and risks.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List on behalf of CM
Poncelet
Sent: Thursday, September 24, 2020 4:25 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" em
The whitelist is created step-by-step by the end-user, as message filters, by
checking through the trash folder and recognizing which received emails are
*not* SPAM/scam. It's a "learning curve."
Phony emails that conform to the rules (as in from spoofed senders' email IDs)
should be reported
W dniu 24.09.2020 o 03:10, CM Poncelet pisze:
All software filters are fundamentally flawed, because they presume to
recognize and 'understand' what is or not SPAM - which is logically
impossible. The only reliable filter is the hardware one, which assumes
by default that every received email is
t; From: IBM Mainframe Discussion List on behalf
> of CM Poncelet
> Sent: Wednesday, September 23, 2020 9:10 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Caution: "Hacked" email caused the distribution of a
> potentially harmful attachment
>
> All software filte
://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List on behalf of CM
Poncelet
Sent: Wednesday, September 23, 2020 9:10 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attac
September 22, 2020 5:25 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
> harmful attachment
>
> The commercial e-mail malware filters watch for e-mail where the "from"
> address and the headers do n
es Mills
> Sent: Tuesday, September 22, 2020 5:25 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Caution: "Hacked" email caused the distribution of a
> potentially harmful attachment
>
> The commercial e-mail malware filters watch for e-mail where the "from"
Mainframe Discussion List on behalf of
Charles Mills
Sent: Tuesday, September 22, 2020 5:25 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attachment
The commercial e-mail malware filters watch for e-mail where the &quo
t;Hacked" email caused the distribution of a potentially
harmful attachment
Hence, check your trash/deleted folder and then create message filters
for any legitimate emails it contains, then run your message filters
against your trash/deleted folder to move the legitimate emails out of
there
l (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
>
>
>
> From: IBM Mainframe Discussion List on behalf of
> CM Poncelet
> Sent: Monday, September 21, 2020 10:18 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Caution: "Hacked" email caused the distribution of a p
__
> From: IBM Mainframe Discussion List on behalf of
> CM Poncelet
> Sent: Monday, September 21, 2020 10:18 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
> harmful attach
ssion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of R.S.
Sent: Tuesday, September 22, 2020 3:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attachment
Bob,
Yes you correctly interpreted my point about the lan
/~smetz3
From: IBM Mainframe Discussion List on behalf of CM
Poncelet
Sent: Monday, September 21, 2020 10:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attachment
FWIW
on behalf of Bob
Bridges
Sent: Tuesday, September 22, 2020 10:27 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attachment
I'm pretty sure that in the bad old days, even the headers could not accurately
reflect
Reply-To: IBM Mainframe Discussion List
Sender: IBM Mainframe Discussion List
From: CM Poncelet
Organization: L! Logic Integration
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attachment
To: IBM-MAIN@LISTSERV.UA.EDU
In
Bob,
Yes you correctly interpreted my point about the language in scam emails.
However ...it is NOT MY observation. I'm only messenger. This is
recognized by proffessionals who work (fight) with scam and Internet
security, and study the problem.
And it is reasonable, not preposterous.
Few
FWIW
(a) Begin by assuming that *all* received emails are spam/scam (and
define this as the bottom line catch-all message filter) *unless* a
higher up message filter recognizes both the sender(s)'s and the 'to'
recipient's addresses as valid.
(b) The sender's original email address can be found
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Jesse 1 Robinson
Sent: Monday, September 21, 2020 17:08
JR> The idea of deliberately dumbing down language in spam is preposterous.
First of all I don't understand the purported logic
On Mon, Sep 21, 2020 at 09:08:22PM +, Jesse 1 Robinson wrote:
> The idea of deliberately dumbing down language in spam is
> preposterous. First of all I don't understand the purported logic of
> it. More important, while English is an official language in
> Nigeria, it is no one's mother
Sent: Monday, September 21, 2020 10:19 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Caution: "Hacked" email caused the distribution of a
potentially harmful attachment
CAUTION EXTERNAL EMAIL
Interesting hypothesis. I always supposed that they were badly written eithe
On Mon, Sep 21, 2020 at 04:00:04PM +0200, R.S. wrote:
[...]
> But seriously:
> 1. Anyone can put any name in the "sender" field. There are even
> free web services for kiddies who want to be "hackers". However
> hacked (hijacked) email account means access to address database. I
> do not expect
Interesting hypothesis. I always supposed that they were badly written
either because a) scammers don't care (which is perhaps another way of
saying they're illiterate, or b) these Nigerian-oil-minister scams actually
are written by foreigners whose English is bad - not, perhaps, by actual
W dniu 20.09.2020 o 17:00, Tony Brown pisze:
Please be advised:
My email account was hacked while I was on vacation last week. Generated from my email address were two
variations of emails with subjects of "Proof of Payment" or "Receipt of Payment" each
containing an "html" attachment. If
My first thought is "you can telephone if you want, but email's ok too. But
if you email, send a ~fresh~ email, addressing it from your own address
book". Don't use the Reply function, because the spoofer can set the
reply-to option.
I once got a plea for emergency funds from an aunt,
On Mon, 21 Sep 2020 00:39:21 +, Seymour J Metz wrote:
>Maybe, but it is more likely that someone is just putting your name and
>address in the header.
>
LISTSERVs are a treasure trove. IIRC someone once masquerading as an
IBM-MAIN subscriber sent a Spanish Prisoner message to other
Maybe, but it is more likely that someone is just putting your name and address
in the header.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List on behalf of
Tony Brown
Sent: Sunday, September 20, 2020
PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attachment
The general rule is "don't open attachments that you were not expecting." If
in doubt, telephone -- do not e-mail -- the sender and ask if he
: Sunday, September 20, 2020 2:23 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Caution: "Hacked" email caused the distribution of a potentially
harmful attachment
Your account does not have to be “Hacked” to send emails that are made to look
like your account was used to send them.
>From
Your account does not have to be “Hacked” to send emails that are made to look
like your account was used to send them.
From time to time, based on what you said, I have sent extortion/blackmail
emails to myself
Checking the headers, and tracking the ip addresses... I’ve been traveling
Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office ⇐=== NEW
robin...@sce.com
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Charles Mills
Sent: Sunday, September 20, 2020 11:13 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Caution: "Hacked" em
The general rule is "don't open attachments that you were not expecting." If
in doubt, telephone -- do not e-mail -- the sender and ask if he or she
actually sent it.
Charles
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Tony Brown
33 matches
Mail list logo
