A fascinating piece of spam

2010-12-07 Thread Steven Bellovin
Well -- spammers are following the NANOG list in real-time, it seems. A few hours after my post this afternoon, I received some spam with a correct Subject: line for that post. I'll be happy to forward the email to anyone who wants to analyze it or find the offender and permanently blacklist

Re: A fascinating piece of spam

2010-12-07 Thread Joe Greco
Well -- spammers are following the NANOG list in real-time, it seems. A = few hours after my post this afternoon, I received some spam with a = correct Subject: line for that post. I'll be happy to forward the email = to anyone who wants to analyze it or find the offender and permanently =

Re: A fascinating piece of spam

2010-12-07 Thread Steven Bellovin
Yup, same purported sender... On Dec 7, 2010, at 6:46 40PM, Joe Greco wrote: Well -- spammers are following the NANOG list in real-time, it seems. A = few hours after my post this afternoon, I received some spam with a = correct Subject: line for that post. I'll be happy to forward the

Re: A fascinating piece of spam

2010-12-07 Thread Scott Weeks
--- s...@cs.columbia.edu wrote: From: Steven Bellovin s...@cs.columbia.edu Yup, same purported sender... From what company? So we don't make the mistake of buying from them. scott

Re: A fascinating piece of spam

2010-12-07 Thread Scott Weeks
From: Scott Weeks sur...@mauigateway.com From: Steven Bellovin s...@cs.columbia.edu Yup, same purported sender... From what company? So we don't make the mistake of buying from them. -- Never mind, I got one too.

Re: A fascinating piece of spam

2010-12-07 Thread Christopher Morrow
same, sent via yahoomail webmail (I think): srcaddr: 173.208.103.211 On Tue, Dec 7, 2010 at 8:46 PM, Scott Weeks sur...@mauigateway.com wrote: --- s...@cs.columbia.edu wrote: From: Steven Bellovin s...@cs.columbia.edu Yup, same purported sender...

Re: A fascinating piece of spam

2010-12-07 Thread kris foster
All Taken care of (at least for the @yahoo address I received the spam from). Chris and Steven, mind fwd'ing the problem emails to adm...@nanog.org? Kris On Dec 7, 2010, at 6:19 PM, Christopher Morrow wrote: same, sent via yahoomail webmail (I think): srcaddr: 173.208.103.211 On Tue, Dec

Re: A fascinating piece of spam

2010-12-07 Thread Marshall Eubanks
I have been seeing targeted spam for a while now - typically from someone with my last name and a random first name, and a familiar subject line. Just wait until they start using the _text_ from open mail lists as well. Regards Marshall On Dec 7, 2010, at 6:46 PM, Joe Greco wrote: Well --

Re: A fascinating piece of spam

2010-12-07 Thread Joly MacFie
Nanog is available via at least two archives on the public web - try googling any line of text - even this onehttp://www.google.com/search?q=Nanog+is+available+via+at+least+two+archives+on+the+public+web+-+try+googling+any+line+of+text+-+even+this+one. . j On Tue, Dec 7, 2010 at 10:08 PM,