Anyone else having issues with spam showing up in the Xtra Webmail inbox?

Forums › Spark New Zealand (including Skinny and BigPipe) › Anyone else having issues with spam showing up in the Xtra Webmail inbox?

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | ... | 20

63 posts

Master Geek

#1939062 15-Jan-2018 14:12

I haven't used a filter based on content much, due to getting frustrated trying to get it to work. I remember reading somewhere that wildcards are permissable, and my own experience suggests that they might be necessary in some circumstances. A link to relevant documentation eludes me for the moment.

edit: Google helped me locate a PDF file titled "Spark Business Mail User Guide." As near as I can make out, the webmail interface is similar to that used for Xtra accounts. There's a section "How can I use the conditions in E-Mail filter rules?" which mentions the meanings of the different filter options, and the use of wildcards.

Oblivian

7305 posts

Uber Geek

ID Verified

#1939068 15-Jan-2018 14:14

That is where you need to inspect headers and block the forwarding IP which will be the exploited relay/domain

I've given up on their own 99% and reporting to spamcop which then mails the VPS abuse. At the least cause a blacklist

1101

3122 posts

Uber Geek

#1939577 16-Jan-2018 10:16

If you're getting bombardered with spam, and its such an issue...

consider that email adress as trashed . get a new email adress, possibly with a new provider
Millions of yahoo (ie xtra) email adresses & their contacts were stolen off yahoo servers some time back
If on spammers list , you will never stop incoming spam. One spammer gets blocked, another starts up the next day
Its a fight you cant win.

I have very few spam sent to my xtra email adress. Maybee one or 2 a day. Its not such a big issue to just delete them, rather than go
on a personal crusade against something that simply can never be eliminated.
If you are being flooded with spam, consider that email adress as trashed .

to try & mitigate spam
never try & unsubscribe to spam (a few exceptions) . That just comfirms the email adress & you may get more spam
Dont ever give out your main email adress to websites, software registration etc. Get a gmail email & use that as a email dump for sites & software
that require your email adress. If you give out your email to 3rd parties , that can be passed on or onsold to marketers (this does happen)

check your email adress here
https://haveibeenpwned.com/

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#1939581 16-Jan-2018 10:18

I'm pretty out of touch with the Email folks these days.

I have been looped into some ongoing stuff for this and can confirm, lately it's gotten far worse and is being very much looked into (internally it has been heavily noticed by users of xtramail too.)

Can't really confirm too much more for now from here, but thought it's worth letting yal know, You are heard :)

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

FOCUS0

64 posts

Master Geek

#1941222 16-Jan-2018 23:14

Thanks for the responses,

Glad to know that it is a general issue presently - thanks

Dumping my email address is not an option

My question was a technical one -

Using the Filter ... why did the rule "Content" which is dealing with the body of the Email message

fail to detect the words "sereduc" which is in the HTML code as a link as previously quoted

I read through the Business document for Spark EMAIL on and dealing with HTML is not mentioned in the rules.

pillmonsta

73 posts

Master Geek
Inactive user

#1941236 17-Jan-2018 05:29

FOCUS0:

Thanks for the responses,

Glad to know that it is a general issue presently - thanks

Dumping my email address is not an option

My question was a technical one -

Using the Filter ... why did the rule "Content" which is dealing with the body of the Email message

fail to detect the words "sereduc" which is in the HTML code as a link as previously quoted

I read through the Business document for Spark EMAIL on and dealing with HTML is not mentioned in the rules.

Al

I had a client call yesterday re: xtramail spam, still haven't seen Yahoo levels yet though. Thank God. lol

lisati

63 posts

Master Geek

#1941295 17-Jan-2018 09:18

I just took a look at Spark's FB page - the complaints are coming in thick and fast. I'm thankful that I'm not the only one who think something's a bit off with their choice of spam filtering techniques. As much as I dislike using Yahoo, I think they handle(d) unwanted mail a lot better. For starters, there's the report spam button, which does more than flick unwanted mail out of the way into a spam/junk folder.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

pillmonsta

73 posts

Master Geek
Inactive user

#1941314 17-Jan-2018 09:38

lisati:

I just took a look at Spark's FB page - the complaints are coming in thick and fast. I'm thankful that I'm not the only one who think something's a bit off with their choice of spam filtering techniques. As much as I dislike using Yahoo, I think they handle(d) unwanted mail a lot better. For starters, there's the report spam button, which does more than flick unwanted mail out of the way into a spam/junk folder.

Yahoo have been hacked 3 times. That's why Spark ditched them....

I would recommend Gmail tbh....Gmail have a great spam filter.

lisati

63 posts

Master Geek

#1941339 17-Jan-2018 10:13

pillmonsta:

lisati:

I just took a look at Spark's FB page - the complaints are coming in thick and fast. I'm thankful that I'm not the only one who think something's a bit off with their choice of spam filtering techniques. As much as I dislike using Yahoo, I think they handle(d) unwanted mail a lot better. For starters, there's the report spam button, which does more than flick unwanted mail out of the way into a spam/junk folder.

Yahoo have been hacked 3 times. That's why Spark ditched them....

I would recommend Gmail tbh....Gmail have a great spam filter.

+1 for Gmail. I have accounts with them which sometimes come in useful when the outgoing spam filters used by Spark/SMX get their knickers in a twist when trying to forward multiple unwanted emails to Spamcop.

FineWine

2985 posts

Uber Geek

Trusted

Nurse (R)

Lifetime subscriber

#1943522 19-Jan-2018 13:55

ok my 70yr old cousin this week has started to receive loads more spam from:

@Ww.co.nz (this one is the worst with close to 100 this week)

@buildingprojects.host

@wegolo.com

all with different alphanumerical prefixes.

Now these spam have only just started this week. She complained to me last weekend about her level of unwanted emails. Her sole internet/email access is via her iPhone 8plus and unfortunately in the past she has purchased a lot of stuff on line. She gave me her access to her email address so I logged in to her spark webmail account and spent over an hour spamming and blacklisting unwanted emails. (I have now reached the Blacklist list limit) Now that was last weekend and yet on Monday this week she installed the herald NZ app and signed up (which she did not have to - but unfortunately she did) now since then she has been receiving ton's of spam from the above @ suffix's. These are all new spam addresses. Just a coincidence or has the herald been naughty or hacked?

Whilst the difficult we can do immediately, the impossible takes a bit longer. However, miracles you will have to wait for.

1101

3122 posts

Uber Geek

#1943575 19-Jan-2018 14:57

FineWine:

and spent over an hour spamming and blacklisting unwanted emails. (I have now reached the Blacklist list limit)

this is why Blacklists just dont work at this level.
A month from now all those blacklisted will be gone forever anyway and a new batch of spammers using new
email addresses will have taken their place. Or the same spammer will be using different email addresses to send from.

As you now see with the next batch of spammers you've now got.

spammers sending from a .nz email adress can be reported & prosecuted . NZ based spammers can be tracked down & punished under NZ Law
assuming the .nz adress isnt faked

Try here for .nz spammers
https://www.dia.govt.nz/Spam-Complain-About-Spam

https://www.reportspam.co.nz/

lisati

63 posts

Master Geek

#1943576 19-Jan-2018 14:57

The graphs available on Spamcop's web page make interesting viewing, showing a sudden upsurge eariler this week.

I've seen Russian dating spam scattered over a number of email accounts, not just with Spark. The only pattern I've noticed is that the text is largely the same, and a referrence to various rambler[dot]ru email addresses contained in the message body; the messages track back to various different providers in different locations.

As for the Kiwibank phishing attempts I've seen, I don't think they actually originate at the .edu domains I've seen.

Oblivian

7305 posts

Uber Geek

ID Verified

#1943680 19-Jan-2018 17:41

Seeing the same as you. had my only 2nd dating one last night. Originator was a hotmail server.

The kiwi bank from stanford spoof and vps hosting

so it seems they are doing the same as my SEO backlink friends.

Spins up a vps on amazon or similar free trial, cheap domain, install registration bot and smtp tool. have at it.

Time its shut down the damage is done for as little as $11

FineWine

2985 posts

Uber Geek

Trusted

Nurse (R)

Lifetime subscriber

#1943736 19-Jan-2018 18:57

1101:

Try here for .nz spammers
https://www.dia.govt.nz/Spam-Complain-About-Spam

https://www.reportspam.co.nz/

Love it NOT

After following their instructions I attempted to forward one of many emails but it was bounced/rejected due to spam content.

Edited due non completion

Whilst the difficult we can do immediately, the impossible takes a bit longer. However, miracles you will have to wait for.

Oblivian

7305 posts

Uber Geek

ID Verified

#1945914 24-Jan-2018 10:52

Must be Kiwibank day

Where subject like *Kiwibank*lock* = bin

Surely possible...

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | ... | 20