Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-26 Thread Wayne Bickerdike
The email came from someone in our organization who was asking us to forward any suspicious attachment by clicking on it and saving it before forwarding it on. My reaction was that this was another attempt to get all the recipients to click on something dangerous. I immediately sent an email to

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-25 Thread zMan
Wayne Bickerdike wrote: >My "spoof" email was apparently genuine. The >person who sent it has no idea >how much he got wrong with the request. Eh? Can you elaborate? First sentence makes no sense. It was spoofed or it wasn't?! -- zMan -- "I've got a mainframe and I'm not afraid to use it"

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-24 Thread Seymour J Metz
and risks. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of CM Poncelet Sent: Thursday, September 24, 2020 4:25 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" em

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-24 Thread CM Poncelet
The whitelist is created step-by-step by the end-user, as message filters, by checking through the trash folder and recognizing which received emails are *not* SPAM/scam. It's a "learning curve." Phony emails that conform to the rules (as in from spoofed senders' email IDs) should be reported

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-24 Thread R.S.
W dniu 24.09.2020 o 03:10, CM Poncelet pisze: All software filters are fundamentally flawed, because they presume to recognize and 'understand' what is or not SPAM - which is logically impossible. The only reliable filter is the hardware one, which assumes by default that every received email is

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-23 Thread Wayne Bickerdike
t; From: IBM Mainframe Discussion List on behalf > of CM Poncelet > Sent: Wednesday, September 23, 2020 9:10 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Caution: "Hacked" email caused the distribution of a > potentially harmful attachment > > All software filte

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-23 Thread Seymour J Metz
://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of CM Poncelet Sent: Wednesday, September 23, 2020 9:10 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attac

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-23 Thread CM Poncelet
September 22, 2020 5:25 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Caution: "Hacked" email caused the distribution of a potentially > harmful attachment > > The commercial e-mail malware filters watch for e-mail where the "from" > address and the headers do n

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-23 Thread Wayne Bickerdike
es Mills > Sent: Tuesday, September 22, 2020 5:25 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Caution: "Hacked" email caused the distribution of a > potentially harmful attachment > > The commercial e-mail malware filters watch for e-mail where the "from"

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread Seymour J Metz
Mainframe Discussion List on behalf of Charles Mills Sent: Tuesday, September 22, 2020 5:25 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment The commercial e-mail malware filters watch for e-mail where the &quo

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread Charles Mills
t;Hacked" email caused the distribution of a potentially harmful attachment Hence, check your trash/deleted folder and then create message filters for any legitimate emails it contains, then run your message filters against your trash/deleted folder to move the legitimate emails out of there

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread Seymour J Metz
l (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > > > From: IBM Mainframe Discussion List on behalf of > CM Poncelet > Sent: Monday, September 21, 2020 10:18 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Caution: "Hacked" email caused the distribution of a p

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread CM Poncelet
__ > From: IBM Mainframe Discussion List on behalf of > CM Poncelet > Sent: Monday, September 21, 2020 10:18 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Caution: "Hacked" email caused the distribution of a potentially > harmful attach

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread Charles Mills
ssion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Tuesday, September 22, 2020 3:30 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment Bob, Yes you correctly interpreted my point about the lan

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread Seymour J Metz
/~smetz3 From: IBM Mainframe Discussion List on behalf of CM Poncelet Sent: Monday, September 21, 2020 10:18 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment FWIW

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread Seymour J Metz
on behalf of Bob Bridges Sent: Tuesday, September 22, 2020 10:27 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment I'm pretty sure that in the bad old days, even the headers could not accurately reflect

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread Bob Bridges
Reply-To: IBM Mainframe Discussion List Sender: IBM Mainframe Discussion List From: CM Poncelet Organization: L! Logic Integration Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment To: IBM-MAIN@LISTSERV.UA.EDU In

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-22 Thread R.S.
Bob, Yes you correctly interpreted my point about the language in scam emails. However ...it is NOT MY observation. I'm only messenger. This is recognized by proffessionals who work (fight) with scam and Internet security, and study the problem. And it is reasonable, not preposterous. Few

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-21 Thread CM Poncelet
FWIW   (a) Begin by assuming that *all* received emails are spam/scam (and define this as the bottom line catch-all message filter) *unless* a higher up message filter recognizes both the sender(s)'s and the 'to' recipient's addresses as valid. (b) The sender's original email address can be found

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-21 Thread Bob Bridges
-Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jesse 1 Robinson Sent: Monday, September 21, 2020 17:08 JR> The idea of deliberately dumbing down language in spam is preposterous. First of all I don't understand the purported logic

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-21 Thread Tomasz Rola
On Mon, Sep 21, 2020 at 09:08:22PM +, Jesse 1 Robinson wrote: > The idea of deliberately dumbing down language in spam is > preposterous. First of all I don't understand the purported logic of > it. More important, while English is an official language in > Nigeria, it is no one's mother

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-21 Thread Jesse 1 Robinson
Sent: Monday, September 21, 2020 10:19 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment CAUTION EXTERNAL EMAIL Interesting hypothesis. I always supposed that they were badly written eithe

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-21 Thread Tomasz Rola
On Mon, Sep 21, 2020 at 04:00:04PM +0200, R.S. wrote: [...] > But seriously: > 1. Anyone can put any name in the "sender" field. There are even > free web services for kiddies who want to be "hackers". However > hacked (hijacked) email account means access to address database. I > do not expect

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-21 Thread Bob Bridges
Interesting hypothesis. I always supposed that they were badly written either because a) scammers don't care (which is perhaps another way of saying they're illiterate, or b) these Nigerian-oil-minister scams actually are written by foreigners whose English is bad - not, perhaps, by actual

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-21 Thread R.S.
W dniu 20.09.2020 o 17:00, Tony Brown pisze: Please be advised: My email account was hacked while I was on vacation last week. Generated from my email address were two variations of emails with subjects of "Proof of Payment" or "Receipt of Payment" each containing an "html" attachment. If

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Bob Bridges
My first thought is "you can telephone if you want, but email's ok too. But if you email, send a ~fresh~ email, addressing it from your own address book". Don't use the Reply function, because the spoofer can set the reply-to option. I once got a plea for emergency funds from an aunt,

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Paul Gilmartin
On Mon, 21 Sep 2020 00:39:21 +, Seymour J Metz wrote: >Maybe, but it is more likely that someone is just putting your name and >address in the header. > LISTSERVs are a treasure trove. IIRC someone once masquerading as an IBM-MAIN subscriber sent a Spanish Prisoner message to other

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Seymour J Metz
:00 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Caution: "Hacked" email caused the distribution of a potentially harmful attachment Please be advised: My email account was hacked while I was on vacation last week. Generated from my email address were two variations of emails with subjects

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Seymour J Metz
PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment The general rule is "don't open attachments that you were not expecting." If in doubt, telephone -- do not e-mail -- the sender and ask if he

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Charles Mills
: Sunday, September 20, 2020 2:23 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment Your account does not have to be “Hacked” to send emails that are made to look like your account was used to send them. >From

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Steve Thompson
Your account does not have to be “Hacked” to send emails that are made to look like your account was used to send them. From time to time, based on what you said, I have sent extortion/blackmail emails to myself Checking the headers, and tracking the ip addresses... I’ve been traveling

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Jesse 1 Robinson
ssage- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tony Brown Sent: Sunday, September 20, 2020 8:00 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Caution: "Hacked" email caused the distribution of a potentially harmful attachment Please be advised: My em

Re: Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Charles Mills
Tony Brown Sent: Sunday, September 20, 2020 8:00 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Caution: "Hacked" email caused the distribution of a potentially harmful attachment Please be advised: My email account was hacked while I was on vacation last week. Generated from my email address

Caution: "Hacked" email caused the distribution of a potentially harmful attachment

2020-09-20 Thread Tony Brown
Please be advised: My email account was hacked while I was on vacation last week. Generated from my email address were two variations of emails with subjects of "Proof of Payment" or "Receipt of Payment" each containing an "html" attachment. If you receive either of these emails, please