Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11
469 posts

Ultimate Geek
+1 received by user: 107


  # 975211 27-Jan-2014 16:24
2 people support this post
Send private message

I wonder how many customers are forking out $$ to get their email fixed by IT professionals.

It's a trivial fix for the sort of users here, but I've had clients who haven't had a clue how to fix it (I haven't had the heart to bill them for it and justify it as good will).

51 posts

Master Geek
+1 received by user: 18


  # 976436 29-Jan-2014 09:00
Send private message

Spam from hacked Xtra accounts is coming in thick and fast this morning. I've had six so far.

 
 
 
 


1948 posts

Uber Geek
+1 received by user: 469
Inactive user


  # 976439 29-Jan-2014 09:03
Send private message

DigiDog: Spam from hacked Xtra accounts is coming in thick and fast this morning. I've had six so far.


If you could send some of the full headers to me (pl at telecom.co.nz) if you know what I mean when asking for full headers that would be brilliant.

51 posts

Master Geek
+1 received by user: 18


  # 976450 29-Jan-2014 09:16
One person supports this post
Send private message

I've been reporting these emails to SpamCop with abuse at Xtra copied in as previously requested. While I always delete spam emails after reporting them, I have kept one email today because it belongs to one of my clients and I'll have a quick chat to him. I've just sent you a copy... with full headers of course. ;-)

1948 posts

Uber Geek
+1 received by user: 469
Inactive user


  # 976454 29-Jan-2014 09:24
Send private message

DigiDog: I've been reporting these emails to SpamCop with abuse at Xtra copied in as previously requested. While I always delete spam emails after reporting them, I have kept one email today because it belongs to one of my clients and I'll have a quick chat to him. I've just sent you a copy... with full headers of course. ;-)


Cheers... Appreciated :)

47 posts

Geek
+1 received by user: 4


  # 976572 29-Jan-2014 11:50
Send private message

Yeah I got a wave today to. Also from @yahoo accounts.  Seems like the old harvested data,  as the headers spoofed. 

So not much any one can do ( apart from international security finding the hackers, if there is such a thing.) Its the old hack, coming back to bite. 

3463 posts

Uber Geek
+1 received by user: 455

Trusted

  # 976590 29-Jan-2014 12:21
3 people support this post
Send private message

Maybe they should just start publishing SPF records......





 
 
 
 


51 posts

Master Geek
+1 received by user: 18


  # 976618 29-Jan-2014 12:39
Send private message

Two more (with full headers) coming your way Peter.

1142 posts

Uber Geek
+1 received by user: 208

Subscriber

  # 976762 29-Jan-2014 15:36
Send private message

So do we have any idea what kind of installs are attempted if someone does click on a link in one of the SPAM emails? CEO believes he has!

2116 posts

Uber Geek
+1 received by user: 1194


  # 976770 29-Jan-2014 15:47
Send private message

allan: So do we have any idea what kind of installs are attempted if someone does click on a link in one of the SPAM emails? CEO believes he has!


Won't it be fun if it's cryptolocker...

I tried a link via my phone, that may or may not be a result of this hack (suspect it is), it appeared to just be a scam weight loss site. Obviously I have no idea if the site contained any malicious content.




Location: Dunedin

 


14906 posts

Uber Geek
+1 received by user: 2028


  # 976793 29-Jan-2014 16:02
Send private message

Had a wave today too. Not sure what server these ones are coming from, but they are from the same xtra email addresses as before.

3193 posts

Uber Geek
+1 received by user: 415


  # 976798 29-Jan-2014 16:12
Send private message

mattwnz: Had a wave today too. Not sure what server these ones are coming from, but they are from the same xtra email addresses as before.


View the source data :) Has it there, last lot was from 'mycomputer' and a pile of UK based servers.

Le Sigh

http://www.stuff.co.nz/the-press/technology/30013197/Fresh-problems-at-YahooXtra

No, don't believe they are from compromised accts mr reporter... someones sold or using the stolen data again as 'from' field methinks.
Sister has already contacted me with the same people that were mailed it last time abusing her for sending spam.. when of course it's not.

14906 posts

Uber Geek
+1 received by user: 2028


  # 976825 29-Jan-2014 17:16
One person supports this post
Send private message

Oblivian:
mattwnz: Had a wave today too. Not sure what server these ones are coming from, but they are from the same xtra email addresses as before.


View the source data :) Has it there, last lot was from 'mycomputer' and a pile of UK based servers.

Le Sigh

http://www.stuff.co.nz/the-press/technology/30013197/Fresh-problems-at-YahooXtra

No, don't believe they are from compromised accts mr reporter... someones sold or using the stolen data again as 'from' field methinks.
Sister has already contacted me with the same people that were mailed it last time abusing her for sending spam.. when of course it's not.


I actually deleted them straightaway so no longer have a copy, setup a rule, and blacklisted those xtra email addresses, as I don't do business with those senders now anyway.

It is amazing to see that some people would be willing to pay over $100 for a tech to sort it for them, but not pay to actually buy a domain and proper email hosting.

51 posts

Master Geek
+1 received by user: 18


  # 976838 29-Jan-2014 17:44
Send private message

None of the current spam emails are coming from Xtra servers - today's batch originated in France, Turkey and other such wonderful countries. The spammers are cleverly targeting the genuine email contacts they found in each Xtra user's address book. In every case the "from" address has been forged so that the spam appears to come from a genuine Xtra account. That greatly increases the percentage of recipients who will click on the email links without thinking.

If Yahoo was running a more secure system the original large scale hack/s wouldn't have happened, and account information for hundreds of thousands of Xtra users and all their friends would not be in the bad guys' hands now. Those of us being spammed by this lot have to face the fact that all of our addresses are now out in the wild and being sold to spammers.

There's really nothing that Telecom can do apart from calm down irritated customers... and hopefully switch their customer email service away from Yahoo!


22186 posts

Uber Geek
+1 received by user: 4756

Trusted
Subscriber

  # 976840 29-Jan-2014 17:59
Send private message

They could deploy some spf records so that the spoofing doesn't work. Not hard except that all their customers with incorrect smtp settings would find emails being blackholed.




Richard rich.ms

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18


E-scooter share scheme launches in Wellington
Posted 17-Jun-2019 12:34


Anyone can broadcast with Kordia Pop Up TV
Posted 13-Jun-2019 10:51


Volvo and Uber present production vehicle ready for self-driving
Posted 13-Jun-2019 10:47


100,000 customers connected to fibre broadband network through Enable
Posted 13-Jun-2019 10:35


5G uptake even faster than expected
Posted 12-Jun-2019 10:01


Xbox showcases 60 anticipated games
Posted 10-Jun-2019 20:24


Trend Micro Turns Public Hotspots into Secure Networks with WiFi Protection for Mobile Devices
Posted 5-Jun-2019 13:24


Bold UK spinoff for beauty software company Flossie
Posted 2-Jun-2019 14:10


Amazon Introduces Echo Show 5
Posted 1-Jun-2019 15:32



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.