New Spam getting through my Spark xtra account

Forums › Spark New Zealand (including Skinny and BigPipe) › New Spam getting through my Spark xtra account

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | ... | 15

1410 posts

Uber Geek

#2167047 24-Jan-2019 17:40

1101:

just wondering,

could some of the issue be self inflicted.
ie : giving out your email adress to anyone or any website that asked for it, putting email adress in plain view on your website , giving email adress to those who will use it for
marketing & pass it on to "affiliated" companies .

The spam coming into my xtra email a/c has never been unmanageable (many days none)
1 or 2 spams a day : honestly thats no big deal and may be unrealistic to expect any less (?)

Absolutely, in my case I strongly believe it arrives in hoards due to my address being in distributed lists from various data breaches as listed at haveibeenpwned.com - but my address was given to what I considered reputable companies/services - i.e. LinkedIn and Adobe (both have had data breaches).

I'm not overly concerned about it, just saying I have also been getting these and they get past the spam filters frequently. I don't regard this as a Spark issue because Spark sub out the e-mail service, and I don't think any company is going to be able to stop 100% of spam for all time.

I do find it curious that they put bogus unsubscribe links in the e-mails sometimes, (otherwise nothing at all), perhaps as a way as seeming legitimate to a filter and also in hopes that users will click it thus confirming the e-mail address they are spamming is valid

FineWine

2981 posts

Uber Geek

Trusted

Nurse (R)

Lifetime subscriber

#2169620 29-Jan-2019 13:54

Still getting them, this time from a Medium called Amanda. Maybe she can predict my spam and stop them coming.

Whilst the difficult we can do immediately, the impossible takes a bit longer. However, miracles you will have to wait for.

snnet

1410 posts

Uber Geek

#2169787 29-Jan-2019 17:20

FineWine:

Still getting them, this time from a Medium called Amanda. Maybe she can predict my spam and stop them coming.

Hmmmmm

Amanda or A Man, Duh?

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2169803 29-Jan-2019 17:44

FineWine:

Still getting them, this time from a Medium called Amanda. Maybe she can predict my spam and stop them coming.

derp.

I'll pull up your details again, i literally just finished talking to the folk and said no, i haven't seen any further examples.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

FineWine

2981 posts

Uber Geek

Trusted

Nurse (R)

Lifetime subscriber

#2170237 30-Jan-2019 14:25

@hio77

Thank you for reaching out the other day, much appreciated. You might as well keep my details open as I received a new one today:

Ethereum Rich Kids <info@e.spark.co.nz>

Subject: 20 Year's Wages in 29 Days?! Here’s How…

Thanks

Whilst the difficult we can do immediately, the impossible takes a bit longer. However, miracles you will have to wait for.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2170239 30-Jan-2019 14:28

FineWine:

@hio77

Thank you for reaching out the other day, much appreciated. You might as well keep my details open as I received a new one today:

Ethereum Rich Kids <info@e.spark.co.nz>

Subject: 20 Year's Wages in 29 Days?! Here’s How…

Thanks

Noted, passing along now.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

JaseNZ

2576 posts

Uber Geek

ID Verified

Lifetime subscriber

#2170361 30-Jan-2019 19:34

Got this one in today, a countdown one for a $2000 gift card, yay I am so lucky.

Content-Type: ⁨text/html; charset="UTF-8"⁩

Content-Transfer-Encoding: ⁨7bit⁩

Received: ⁨from 10.23.40.102 ([10.23.30.21]) by 10.23.40.245 with LMTP id uIraKCGnUFzpMQAADFX+yw ; Tue, 29 Jan 2019 19:18:57 +0000⁩

Received: ⁨from 10.23.30.41 ([10.23.30.21]) by 10.23.40.102 with LMTP id aFtuKCGnUFyWBAAAezw3Lg ; Tue, 29 Jan 2019 19:18:57 +0000⁩

Received: ⁨from xtra.co.nz ([10.23.30.21]) by 10.23.30.41 with LMTP id MLgDDyGnUFxiXwAA613nTQ ; Tue, 29 Jan 2019 19:18:57 +0000⁩

Received: ⁨from bwada3.xyz ([193.39.186.69]) by mx.xtra.co.nz with ESMTP id 5C50A721-692F03BB@mta2305; Tue, 29 Jan 2019 19:18:57 +0000⁩

Return-Path: ⁨<******@xtra.co.nz>⁩

⁨<57.02.04676.127A05C5@xtra.co.nz>⁩

Ding Ding Ding Ding Ding : Ice cream man , Ice cream man

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

JaseNZ

2576 posts

Uber Geek

ID Verified

Lifetime subscriber

#2171459 1-Feb-2019 20:12

And another Samsung one today. At that price I will have `100 please.

Content-Type: ⁨text/html; charset="UTF-8"⁩

Content-Transfer-Encoding: ⁨7bit⁩

Received: ⁨from 10.23.40.102 ([10.23.30.21]) by 10.23.40.245 with LMTP id aOl2AEwvU1zgQAAADFX+yw ; Thu, 31 Jan 2019 17:24:28 +0000⁩

Received: ⁨from 10.23.30.41 ([10.23.30.21]) by 10.23.40.102 with LMTP id 6MwdAEwvU1yWBAAAezw3Lg ; Thu, 31 Jan 2019 17:24:28 +0000⁩

Received: ⁨from xtra.co.nz ([10.23.30.21]) by 10.23.30.41 with LMTP id OG/6OksvU1xSXwAA613nTQ ; Thu, 31 Jan 2019 17:24:27 +0000⁩

Received: ⁨from bwada3.xyz ([193.39.186.69]) by mx.xtra.co.nz with ESMTP id 5C532F4B-95F017C1@mta2306; Thu, 31 Jan 2019 17:24:27 +0000⁩

Return-Path: ⁨<j******@xtra.co.nz>⁩

⁨<88.7C.11537.B4F235C5@xtra.co.nz>

⁩

Ding Ding Ding Ding Ding : Ice cream man , Ice cream man

FineWine

2981 posts

Uber Geek

Trusted

Nurse (R)

Lifetime subscriber

#2171802 2-Feb-2019 14:23

They are very persistant this mob

9 for you! <info@e.spark.co.nz>

Re: for 1 NZ$ ORDER HERE 10 left in stock!

Whilst the difficult we can do immediately, the impossible takes a bit longer. However, miracles you will have to wait for.

JaseNZ

2576 posts

Uber Geek

ID Verified

Lifetime subscriber

#2172312 3-Feb-2019 17:07

A new one from spark today.

Re : Security Alert !

Content-Type: ⁨multipart/alternative; boundary="----=_Part_5863970_1153192138.1549141369144"⁩

Mime-Version: ⁨1.0⁩

Smx-S1V: ⁨⁩

Dkim-Signature: ⁨v=1; a=rsa-sha256; d=xtra.co.nz; s=alpha; c=relaxed/relaxed; q=dns/txt; i=@xtra.co.nz; t=1549141374; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc; bh=vOo/iPKY6Sf7ABy/jDFW1CiOJ7XlYazsZ139UdZCiqc=; b=acQ6gwYMLQqDdYhoAV8t6J6vXxTRb9PTPy4hKlva9Mp6erTTv9KCzpHM8wHqjw0+ a76SRvjcT9Z1KnMshQFng8nRXndfILHHskH4qIe0s2AuR8zbXPuBbN8U4RYNW/PX rm9pXrUpGxSn1RLEZRhikrheRjWmVS2ckCYA92w/h10=;⁩

Smx-S1S: ⁨⁩

X-Priority: ⁨3⁩

Return-Path: ⁨<********@xtra.co.nz>⁩

Importance: ⁨Medium⁩

X-Mailer: ⁨Open-Xchange Mailer v7.8.4-Rev41⁩

Smx-S1C: ⁨⁩

X-Originating-Client: ⁨open-xchange-appsuite⁩

Received: ⁨from 10.23.40.103 ([10.23.30.21]) by 10.23.40.245 with LMTP id aAwHKocFVlz6dgAADFX+yw ; Sat, 02 Feb 2019 21:03:03 +0000⁩

Received: ⁨from 10.23.30.46 ([10.23.30.21]) by 10.23.40.103 with LMTP id kKPKKYcFVlypBAAARqWCkg ; Sat, 02 Feb 2019 21:03:03 +0000⁩

Received: ⁨from xtra.co.nz ([10.23.30.21]) by 10.23.30.46 with LMTP id OFWaKIcFVlykYgAA/dMj0w ; Sat, 02 Feb 2019 21:03:03 +0000⁩

Received: ⁨from internal ([10.23.30.56]) by xtra.co.nz with ESMTP id 5C560581-33120314@mta2306; Sat, 02 Feb 2019 21:03:00 +0000⁩

Received: ⁨from [10.23.30.21] by shared.xtra.co.nz with ESMTP id 5C56057B-2AC40F65@mta2306.omr; Sat, 02 Feb 2019 21:02:54 +0000⁩

⁨<819655843.5863972.1549141369170@webmail.xtra.co.nz>⁩

Ding Ding Ding Ding Ding : Ice cream man , Ice cream man

eracode

Smpl Mnmlst
8846 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2173103 4-Feb-2019 21:32

I have also been getting over the last few weeks almost all of those shown above. Yesterday I received the one shown below, which is very authentic-looking and I think it might catch quite a few people. I forwarded it to the IRD phishing reporting email address - as I have done a couple of times in the past.

Sometimes I just sit and think. Other times I just sit.

Oblivian

7296 posts

Uber Geek

ID Verified

#2173129 4-Feb-2019 22:56

eracode:

I have also been getting over the last few weeks almost all of those shown above. Yesterday I received the one shown below, which is very authentic-looking and I think it might catch quite a few people. I forwarded it to the IRD phishing reporting email address - as I have done a couple of times in the past.

They were quite appreciative of the one I forwarded a couple of weeks ago, It was even more legit looking than that.

Even the report phishing link, lookout for scam footer etc in it was real!

Unfortunately didn't update their latest warning feed with the new variants.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2173130 4-Feb-2019 22:57

@eracode can you DM me your xtra account and the title?

that way i can pass the headers along, I'd have to say that does look reasonably legit though.

made me laugh that they even include the phishing line down the bottom....

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

eracode

Smpl Mnmlst
8846 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2173133 4-Feb-2019 23:05

hio77:
@eracode can you DM me your xtra account and the title?

that way i can pass the headers along, I'd have to say that does look reasonably legit though.

made me laugh that they even include the phishing line down the bottom....

Thanks Troy - done.

Sometimes I just sit and think. Other times I just sit.

mattwnz

20141 posts

Uber Geek

#2173142 5-Feb-2019 00:17

eracode:

I have also been getting over the last few weeks almost all of those shown above. Yesterday I received the one shown below, which is very authentic-looking and I think it might catch quite a few people. I forwarded it to the IRD phishing reporting email address - as I have done a couple of times in the past.

I got the IRD one too to my xtra account. These scammers are getting very clever, because it is one of the most authentic ones I have seen. If it didn't have the underscores in the first sentence, the the URL in the link not linking to IRD, it would have been almost perfect.

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | ... | 15