Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-20 Thread Ángel via mailop
On 2022-11-18 at 11:38 -0800, Ken Simpson wrote: > Hi Michael, > > I've seen the raw email; it did come from PayPal. PayPal needs to get > better at recognizing brand images so that this kind of impersonation > is more difficult on their platform. No doubt they are already > working on that. > >

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-19 Thread Ken Simpson via mailop
Open a ticket for Hotmail [3] ? > > > > From: mailop On Behalf Of Zach Rose via > > mailop > > Sent: Friday, November 18, 2022 11:38 AM > > Cc: mailop@mailop.org > > Subject: Re: [mailop] [EXTERNAL] Really good paypal phishing email > > this morning > > >

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-19 Thread Alessandro Vesely via mailop
On Sat 19/Nov/2022 12:46:01 +0100 Alessandro Vesely wrote: Something is strange in that header...  There is no local A-R, based on that header, both signatures (DKIM and AMS) fail to verify irrespective of the body hash. Oops, that's the redaction. ARC-Seal is good, which means Google

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-19 Thread Alessandro Vesely via mailop
On Fri 18/Nov/2022 20:38:11 +0100 Ken Simpson via mailop wrote: I've seen the raw email; You mean not the header Zach posted? it did come from PayPal. Something is strange in that header... There is no local A-R, based on that header, both signatures (DKIM and AMS) fail to verify

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-19 Thread Laura Atkins via mailop
ticket for Hotmail ? > > From: mailop On Behalf Of Zach Rose via mailop > Sent: Friday, November 18, 2022 11:38 AM > Cc: mailop@mailop.org > Subject: Re: [mailop] [EXTERNAL] Really good paypal phishing email this > morning > > Yeah, that's my theory at the moment, very l

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-18 Thread Jarland Donnell via mailop
Spam Specimen Has Been Processed." Open a ticket for Hotmail [3] ? From: mailop On Behalf Of Zach Rose via mailop Sent: Friday, November 18, 2022 11:38 AM Cc: mailop@mailop.org Subject: Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning Yeah, that's my theory at the mo

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-18 Thread Michael Wise via mailop
cimen Has Been Processed." Open a ticket for Hotmail<http://go.microsoft.com/fwlink/?LinkID=614866> ? From: mailop On Behalf Of Zach Rose via mailop Sent: Friday, November 18, 2022 11:38 AM Cc: mailop@mailop.org Subject: Re: [mailop] [EXTERNAL] Really good paypal phishing email th

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-18 Thread Ken Simpson via mailop
J Wise* > Microsoft Corporation| Spam Analysis > > "Your Spam Specimen Has Been Processed." > > Open a ticket for Hotmail <http://go.microsoft.com/fwlink/?LinkID=614866> > ? > > > > *From:* mailop *On Behalf Of *Zach Rose via > mailop > *Sent:* Fr

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-18 Thread Zach Rose via mailop
ail <http://go.microsoft.com/fwlink/?LinkID=614866> > ? > > > > *From:* mailop *On Behalf Of *Zach Rose via > mailop > *Sent:* Friday, November 18, 2022 7:10 AM > *To:* mailop@mailop.org > *Subject:* [EXTERNAL] [mailop] Really good paypal phishing email this > morn

Re: [mailop] [EXTERNAL] Really good paypal phishing email this morning

2022-11-18 Thread Michael Wise via mailop
n a ticket for Hotmail<http://go.microsoft.com/fwlink/?LinkID=614866> ? From: mailop On Behalf Of Zach Rose via mailop Sent: Friday, November 18, 2022 7:10 AM To: mailop@mailop.org Subject: [EXTERNAL] [mailop] Really good paypal phishing email this morning https://www.screencast.com/t/d