Re: [Spooks] Account Suspension

[KD7JYK DM09]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

qth.net was hacked, all lists they host received this.

Kurt
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Tom Sevart]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

On 03/07/17 09:44, Tracy Johnson wrote:

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

 Well it isn't like any of us spending any big Chase Bank account bucks here.  
You should be happy if they turn it off.  Especially for those of us that don't 
have Chase bank accounts.   Which would be kind of funny in a way.



They can turn off my account, that is, if I hadn't turned it off 
already.  I'll never have a Chase account again.



--
Tom Sevart N2UHC
St. Paul, KS

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Listmember]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

On 03/07/2017 03:18 PM, Zack Widup wrote:

It originated from this site:

www.cep.co.jp

That's in Japan.



In case anyone is interested, the fake Chase Bank website is in 
Indonesia (45.64.1.59) and when the messages first hit the groups I 
reported the site to Chase, the webhoster (PT Master Web Network,) the 
website owner, and to the Indonesian National Police.


The phishers apparently hacked the website of some residential facility 
in Indonesia...


http://45.64.1.59/~k8006636/

...which via DNA is:

http://awanistudento.com/

__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Zack Widup]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

I just took a look at it again. It was received FROM the group I am the
owner of and was then tagged by gmail as being sent by me. I do not find a
record of an e-mail actually being sent from my account to that group.

It originated from this site:

www.cep.co.jp

That's in Japan.

73, Zack


On Tue, Mar 7, 2017 at 2:10 PM, Zack Widup  wrote:

> Yeah, that's kind of what I suspected. What had me thrown off was the
> message to one group that I'm am owner of got the message, supposedly sent
> by me. AND it showed up in my gmail account "Sent" messages as being sent
> by me. I don't know if that is because it was received from an address that
> was supposedly mine, so it labeled it as "sent" by me, or what was
> happening. I'm not quite sure how gmail sorts messages.
>
> I couldn't make much sense out of it by looking at the full header, either.
>
> Oh well, maybe I'll look at it again later.
>
> 73, Zack
>
>
>
> On Tue, Mar 7, 2017 at 1:27 PM,  wrote:
>
>> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from
>> this list
>>
>> That is how they do it - they "spoof" and email address, make it look
>> like the owner of a particular email address has in fact sent the email
>> address. Far easier and far more common that "hacking into" someones
>> email account. Getting a hold of someones or some businesses email
>> contact list can provide many (many) valid emails to use for these
>> nefarious purposes.
>>
>> I always found it a bit funny when these sorts of emails start appearing
>> and the first thing someone suggests is that "someones email account
>> has got hacked".
>>
>> Spoofing or forging email has been around a very long time, tools to
>> detect such forged emails is getting better but there always seems to be
>> some new wrinkle which allows them to fall through the cracks.  Service
>> providers use blacklists of servers which are known as sources for such
>> crap, email sent from one of those servers regardless of the address is
>> simply ignored.
>>
>> cheers, Graham
>>
>>
>> On 3/7/2017, "Chris Smolinski"  wrote:
>>
>> >Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe
>> from this list
>> >
>> >Looks like spam that forged my email address. I don’t think they got
>> into anyone’s email account, but I wonder if they got a list of group
>> owner email addresses from a break-in at qsl.net?
>> >
>> >> On Mar 7, 2017, at 10:28 AM, Zack Widup  wrote:
>> >>
>> >> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe
>> from this list
>> >>
>> >> How are they doing this? This was made to look like it came from
>> Chris's
>> >> e-mail address. Did it actually originate there, or did they send it
>> from
>> >> some other account using Chris's e-mail address as the address in the
>> >> e-mail?
>> >>
>> >> Someone just sent one of these to another group using MY e-mail
>> address.
>> >> I'm the owner of that particular group. So I'm concerned about how
>> they're
>> >> doing this. I did change my personal e-mail account password.
>> >>
>> >> 73, Zack
>> >>
>> >
>> __
>> Spooks mailing list
>> Home: http://mailman.qth.net/mailman/listinfo/spooks
>> Help: http://mailman.qth.net/mmfaq.htm
>> Post: mailto:Spooks@mailman.qth.net
>>
>> This list hosted by: http://www.qsl.net
>> Please help support this email list: http://www.qsl.net/donate.html
>>
>
>
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Zack Widup]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

Yeah, that's kind of what I suspected. What had me thrown off was the
message to one group that I'm am owner of got the message, supposedly sent
by me. AND it showed up in my gmail account "Sent" messages as being sent
by me. I don't know if that is because it was received from an address that
was supposedly mine, so it labeled it as "sent" by me, or what was
happening. I'm not quite sure how gmail sorts messages.

I couldn't make much sense out of it by looking at the full header, either.

Oh well, maybe I'll look at it again later.

73, Zack


On Tue, Mar 7, 2017 at 1:27 PM,  wrote:

> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from
> this list
>
> That is how they do it - they "spoof" and email address, make it look
> like the owner of a particular email address has in fact sent the email
> address. Far easier and far more common that "hacking into" someones
> email account. Getting a hold of someones or some businesses email
> contact list can provide many (many) valid emails to use for these
> nefarious purposes.
>
> I always found it a bit funny when these sorts of emails start appearing
> and the first thing someone suggests is that "someones email account
> has got hacked".
>
> Spoofing or forging email has been around a very long time, tools to
> detect such forged emails is getting better but there always seems to be
> some new wrinkle which allows them to fall through the cracks.  Service
> providers use blacklists of servers which are known as sources for such
> crap, email sent from one of those servers regardless of the address is
> simply ignored.
>
> cheers, Graham
>
>
> On 3/7/2017, "Chris Smolinski"  wrote:
>
> >Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from
> this list
> >
> >Looks like spam that forged my email address. I don’t think they got
> into anyone’s email account, but I wonder if they got a list of group
> owner email addresses from a break-in at qsl.net?
> >
> >> On Mar 7, 2017, at 10:28 AM, Zack Widup  wrote:
> >>
> >> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe
> from this list
> >>
> >> How are they doing this? This was made to look like it came from Chris's
> >> e-mail address. Did it actually originate there, or did they send it
> from
> >> some other account using Chris's e-mail address as the address in the
> >> e-mail?
> >>
> >> Someone just sent one of these to another group using MY e-mail address.
> >> I'm the owner of that particular group. So I'm concerned about how
> they're
> >> doing this. I did change my personal e-mail account password.
> >>
> >> 73, Zack
> >>
> >
> __
> Spooks mailing list
> Home: http://mailman.qth.net/mailman/listinfo/spooks
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:Spooks@mailman.qth.net
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
>
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[planophore]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

That is how they do it - they "spoof" and email address, make it look
like the owner of a particular email address has in fact sent the email
address. Far easier and far more common that "hacking into" someones
email account. Getting a hold of someones or some businesses email
contact list can provide many (many) valid emails to use for these
nefarious purposes.

I always found it a bit funny when these sorts of emails start appearing
and the first thing someone suggests is that "someones email account
has got hacked".

Spoofing or forging email has been around a very long time, tools to
detect such forged emails is getting better but there always seems to be
some new wrinkle which allows them to fall through the cracks.  Service
providers use blacklists of servers which are known as sources for such
crap, email sent from one of those servers regardless of the address is
simply ignored.

cheers, Graham


On 3/7/2017, "Chris Smolinski"  wrote:

>Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
>list
>
>Looks like spam that forged my email address. I don’t think they got into 
>anyone’s email account, but I wonder if they got a list of group owner email 
>addresses from a break-in at qsl.net?  
>
>> On Mar 7, 2017, at 10:28 AM, Zack Widup  wrote:
>> 
>> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from 
>> this list
>> 
>> How are they doing this? This was made to look like it came from Chris's
>> e-mail address. Did it actually originate there, or did they send it from
>> some other account using Chris's e-mail address as the address in the
>> e-mail?
>> 
>> Someone just sent one of these to another group using MY e-mail address.
>> I'm the owner of that particular group. So I'm concerned about how they're
>> doing this. I did change my personal e-mail account password.
>> 
>> 73, Zack
>> 
>
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Tracy Johnson]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

 On 03/07/17, Chris Malboeuf wrote:

> Are the Chinese hackers phishing? 
> 73 Chris 
 

Depends if you really think they were Chinese.  ;-)
73's
 
 
Tracy Johnson
Old fashioned text games hosted below:
http://empire.openmpe.com/empire/
BT








__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Chris Malboeuf]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

Are the Chinese hackers phishing? 
73 Chris 

Sent from my iPad

> On Mar 7, 2017, at 7:45 AM, Tracy Johnson  wrote:
> 
> phishing
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Tracy Johnson]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

 Well it isn't like any of us spending any big Chase Bank account bucks here.  
You should be happy if they turn it off.  Especially for those of us that don't 
have Chase bank accounts.   Which would be kind of funny in a way.

It's just phishing.  (Notice how they're asking you to log on somewhere.)  qth 
list-server history is probably on an archive somewhere and easily found.
 
Tracy Johnson
BT









On 03/07/17, Chris Smolinski wrote:

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

Looks like spam that forged my email address. I don’t think they got into 
anyone’s email account, but I wonder if they got a list of group owner email 
addresses from a break-in at qsl.net? 

> On Mar 7, 2017, at 10:28 AM, Zack Widup  wrote:
> 
> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
> list
> 
> How are they doing this? This was made to look like it came from Chris's
> e-mail address. Did it actually originate there, or did they send it from
> some other account using Chris's e-mail address as the address in the
> e-mail?
> 
> Someone just sent one of these to another group using MY e-mail address.
> I'm the owner of that particular group. So I'm concerned about how they're
> doing this. I did change my personal e-mail account password.
> 
> 73, Zack


__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Borja Marcos]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list


> On 7 Mar 2017, at 16:34, Chris Smolinski  
> wrote:
> 
> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
> list
> 
> Looks like spam that forged my email address. I don’t think they got into 
> anyone’s email account, but I wonder if they got a list of group owner email 
> addresses from a break-in at qsl.net?  

No need for a break-in, your address is listed on the public mailing list info 
page. They probably found it
by simple crawling.

Cheers,






Borja.
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Chris Smolinski]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

Looks like spam that forged my email address. I don’t think they got into 
anyone’s email account, but I wonder if they got a list of group owner email 
addresses from a break-in at qsl.net?  

> On Mar 7, 2017, at 10:28 AM, Zack Widup  wrote:
> 
> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
> list
> 
> How are they doing this? This was made to look like it came from Chris's
> e-mail address. Did it actually originate there, or did they send it from
> some other account using Chris's e-mail address as the address in the
> e-mail?
> 
> Someone just sent one of these to another group using MY e-mail address.
> I'm the owner of that particular group. So I'm concerned about how they're
> doing this. I did change my personal e-mail account password.
> 
> 73, Zack
> 

__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

Re: [Spooks] Account Suspension

[Zack Widup]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

How are they doing this? This was made to look like it came from Chris's
e-mail address. Did it actually originate there, or did they send it from
some other account using Chris's e-mail address as the address in the
e-mail?

Someone just sent one of these to another group using MY e-mail address.
I'm the owner of that particular group. So I'm concerned about how they're
doing this. I did change my personal e-mail account password.

73, Zack


On Tue, Mar 7, 2017 at 8:09 AM, Chase AcctSec. Team
chasesecurity-team_norepl...@chse.com 
wrote:

> Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from
> this list
>
> Hi,
> Due to a recent compromise of our servers by some chinese hackers, It has
> been mandated that we carry out an integrity check to isolate and disable
> all
> suspicious accounts. For now we have already placed a red flag on several
> accounts
> thereby preventing them from carrying out any financial transactions
> whatsoever.
> To ensure that your account was not compromised, you are required to
> ascertain
> your identity, failure to do this within 24 hours will lead to account
> service
> suspension.
> Login and Ascertain Your Identity
> Thanks for your anticipated co-operation and understanding.
> The Accounts Team,
> For Chase Online
> __
> Spooks mailing list
> Home: http://mailman.qth.net/mailman/listinfo/spooks
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:Spooks@mailman.qth.net
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
>
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

[Spooks] Account Suspension

[Chase AcctSec. Team chasesecurity-team_norepl...@chse.com]

Visit http://mailman.qth.net/mailman/listinfo/spooks to unsubscribe from this 
list

Hi,
Due to a recent compromise of our servers by some chinese hackers, It has
been mandated that we carry out an integrity check to isolate and disable
all
suspicious accounts. For now we have already placed a red flag on several
accounts
thereby preventing them from carrying out any financial transactions
whatsoever.
To ensure that your account was not compromised, you are required to
ascertain
your identity, failure to do this within 24 hours will lead to account
service
suspension.
Login and Ascertain Your Identity

Thanks for your anticipated co-operation and understanding.
The Accounts Team,
For Chase Online
__
Spooks mailing list
Home: http://mailman.qth.net/mailman/listinfo/spooks
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:Spooks@mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html