Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11
369 posts

Ultimate Geek
+1 received by user: 60


  Reply # 975211 27-Jan-2014 16:24 2 people support this post Send private message

I wonder how many customers are forking out $$ to get their email fixed by IT professionals.

It's a trivial fix for the sort of users here, but I've had clients who haven't had a clue how to fix it (I haven't had the heart to bill them for it and justify it as good will).

42 posts

Geek
+1 received by user: 18


  Reply # 976436 29-Jan-2014 09:00 Send private message

Spam from hacked Xtra accounts is coming in thick and fast this morning. I've had six so far.

1752 posts

Uber Geek
+1 received by user: 339

Trusted
Spark NZ

  Reply # 976439 29-Jan-2014 09:03 Send private message

DigiDog: Spam from hacked Xtra accounts is coming in thick and fast this morning. I've had six so far.


If you could send some of the full headers to me (pl at telecom.co.nz) if you know what I mean when asking for full headers that would be brilliant.




I work for Spark, but as always my views are my own.

42 posts

Geek
+1 received by user: 18


  Reply # 976450 29-Jan-2014 09:16 One person supports this post Send private message

I've been reporting these emails to SpamCop with abuse at Xtra copied in as previously requested. While I always delete spam emails after reporting them, I have kept one email today because it belongs to one of my clients and I'll have a quick chat to him. I've just sent you a copy... with full headers of course. ;-)

1752 posts

Uber Geek
+1 received by user: 339

Trusted
Spark NZ

  Reply # 976454 29-Jan-2014 09:24 Send private message

DigiDog: I've been reporting these emails to SpamCop with abuse at Xtra copied in as previously requested. While I always delete spam emails after reporting them, I have kept one email today because it belongs to one of my clients and I'll have a quick chat to him. I've just sent you a copy... with full headers of course. ;-)


Cheers... Appreciated :)




I work for Spark, but as always my views are my own.

47 posts

Geek
+1 received by user: 4


  Reply # 976572 29-Jan-2014 11:50 Send private message

Yeah I got a wave today to. Also from @yahoo accounts.  Seems like the old harvested data,  as the headers spoofed. 

So not much any one can do ( apart from international security finding the hackers, if there is such a thing.) Its the old hack, coming back to bite. 

3016 posts

Uber Geek
+1 received by user: 199

Trusted
Subscriber

  Reply # 976590 29-Jan-2014 12:21 3 people support this post Send private message

Maybe they should just start publishing SPF records......





42 posts

Geek
+1 received by user: 18


  Reply # 976618 29-Jan-2014 12:39 Send private message

Two more (with full headers) coming your way Peter.

689 posts

Ultimate Geek
+1 received by user: 23

Subscriber

  Reply # 976762 29-Jan-2014 15:36 Send private message

So do we have any idea what kind of installs are attempted if someone does click on a link in one of the SPAM emails? CEO believes he has!

862 posts

Ultimate Geek
+1 received by user: 282


  Reply # 976770 29-Jan-2014 15:47 Send private message

allan: So do we have any idea what kind of installs are attempted if someone does click on a link in one of the SPAM emails? CEO believes he has!


Won't it be fun if it's cryptolocker...

I tried a link via my phone, that may or may not be a result of this hack (suspect it is), it appeared to just be a scam weight loss site. Obviously I have no idea if the site contained any malicious content.

7372 posts

Uber Geek
+1 received by user: 408


  Reply # 976793 29-Jan-2014 16:02 Send private message

Had a wave today too. Not sure what server these ones are coming from, but they are from the same xtra email addresses as before.

1195 posts

Uber Geek
+1 received by user: 43


  Reply # 976798 29-Jan-2014 16:12 Send private message

mattwnz: Had a wave today too. Not sure what server these ones are coming from, but they are from the same xtra email addresses as before.


View the source data :) Has it there, last lot was from 'mycomputer' and a pile of UK based servers.

Le Sigh

http://www.stuff.co.nz/the-press/technology/30013197/Fresh-problems-at-YahooXtra

No, don't believe they are from compromised accts mr reporter... someones sold or using the stolen data again as 'from' field methinks.
Sister has already contacted me with the same people that were mailed it last time abusing her for sending spam.. when of course it's not.

7372 posts

Uber Geek
+1 received by user: 408


  Reply # 976825 29-Jan-2014 17:16 One person supports this post Send private message

Oblivian:
mattwnz: Had a wave today too. Not sure what server these ones are coming from, but they are from the same xtra email addresses as before.


View the source data :) Has it there, last lot was from 'mycomputer' and a pile of UK based servers.

Le Sigh

http://www.stuff.co.nz/the-press/technology/30013197/Fresh-problems-at-YahooXtra

No, don't believe they are from compromised accts mr reporter... someones sold or using the stolen data again as 'from' field methinks.
Sister has already contacted me with the same people that were mailed it last time abusing her for sending spam.. when of course it's not.


I actually deleted them straightaway so no longer have a copy, setup a rule, and blacklisted those xtra email addresses, as I don't do business with those senders now anyway.

It is amazing to see that some people would be willing to pay over $100 for a tech to sort it for them, but not pay to actually buy a domain and proper email hosting.

42 posts

Geek
+1 received by user: 18


  Reply # 976838 29-Jan-2014 17:44 Send private message

None of the current spam emails are coming from Xtra servers - today's batch originated in France, Turkey and other such wonderful countries. The spammers are cleverly targeting the genuine email contacts they found in each Xtra user's address book. In every case the "from" address has been forged so that the spam appears to come from a genuine Xtra account. That greatly increases the percentage of recipients who will click on the email links without thinking.

If Yahoo was running a more secure system the original large scale hack/s wouldn't have happened, and account information for hundreds of thousands of Xtra users and all their friends would not be in the bad guys' hands now. Those of us being spammed by this lot have to face the fact that all of our addresses are now out in the wild and being sold to spammers.

There's really nothing that Telecom can do apart from calm down irritated customers... and hopefully switch their customer email service away from Yahoo!


11172 posts

Uber Geek
+1 received by user: 570

Trusted
Subscriber

  Reply # 976840 29-Jan-2014 17:59 Send private message

They could deploy some spf records so that the spoofing doesn't work. Not hard except that all their customers with incorrect smtp settings would find emails being blackholed.




Richard rich.ms

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11
View this topic in a long page with up to 500 replies per page Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





Trending now »

Hot discussions in our forums right now:

Government Limos
Created by networkn, last reply by joker97 on 30-Oct-2014 23:24 (78 replies)
Pages... 4 5 6


Snap refuses to replace faulty gear
Created by Brendan, last reply by MadEngineer on 28-Oct-2014 19:07 (92 replies)
Pages... 5 6 7


Speed limit when overtaking? Teach me please.
Created by nakedmolerat, last reply by joker97 on 28-Oct-2014 17:13 (123 replies)
Pages... 7 8 9


House Auctions
Created by t0ny, last reply by Geektastic on 27-Oct-2014 14:26 (80 replies)
Pages... 4 5 6


Won a prize draw at Homeshow....sort of.
Created by heylinb4nz, last reply by eracode on 30-Oct-2014 17:56 (15 replies)

Help choosing a BBQ
Created by lokhor, last reply by blakamin on 28-Oct-2014 21:30 (31 replies)
Pages... 2 3


50 free Airpoints Dollars™ when you spend $300 OneSmart
Created by jnimmo, last reply by khull on 30-Oct-2014 16:04 (26 replies)
Pages... 2


VF - months of poor internet, hours of waiting on hold, no help!
Created by pcs, last reply by NZCrusader on 30-Oct-2014 09:39 (27 replies)
Pages... 2



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.