Home page logo
/

nanog logo nanog mailing list archives

Re: New SPAM DOS
From: John Peach <john-nanog () johnpeach com>
Date: Fri, 8 Jan 2010 14:47:28 -0500

It's a phishing scam:

http://isc.sans.org/diary.html?storyid=7918&rss



On Fri, 8 Jan 2010 12:41:07 -0700
Blake Pfankuch <bpfankuch () cpgreeley com> wrote:

I too have been receiving these to my spamtrap domain...  again any
ideas to combat this would be helpful.

-----Original Message-----
From: Shane Ronan [mailto:sronan () fattoc com]
Sent: Friday, January 08, 2010 12:34 PM
To: Owen DeLong
Cc: Nanog list
Subject: Re: New SPAM DOS

I recently started receiving these as well for my domain.

Would appreciate anyone's input on what the deal is.

On Jan 8, 2010, at 2:22 PM, Owen DeLong wrote:

At least this is new for me...

I host scvrs.org on one of my servers, and, it does not have any
outlook or owa services.  For some reason, someone decided to try
and send this message out to various internet recipients:

Dear user of the scvrs.org mailing service!

We are informing you that because of the security upgrade of the
mailing service your mailbox (x) settings were changed. In order to
apply the new set of settings click on the following link:

http://scvrs.org/owa/service_directory/settings.php?email=x&from=
scvrs.org&fromname=wa2ibm

Best regards, scvrs.org Technical Support.

An now I'm having to clean up various blacklistings thinking that my
server is a spamvertised web site.

Anyone seen this before?  Any good techniques for combatting it?

Owen






-- 
John


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault