Anyone else having issues with spam showing up in the Xtra Webmail inbox?

Forums › Spark New Zealand › Anyone else having issues with spam showing up in the Xtra Webmail inbox?

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | ... | 20

60 posts

Master Geek
+1 received by user: 3

# 1939062 15-Jan-2018 14:12

I haven't used a filter based on content much, due to getting frustrated trying to get it to work. I remember reading somewhere that wildcards are permissable, and my own experience suggests that they might be necessary in some circumstances. A link to relevant documentation eludes me for the moment.

edit: Google helped me locate a PDF file titled "Spark Business Mail User Guide." As near as I can make out, the webmail interface is similar to that used for Xtra accounts. There's a section "How can I use the conditions in E-Mail filter rules?" which mentions the meanings of the different filter options, and the use of wildcards.

Oblivian

3170 posts

Uber Geek
+1 received by user: 412

# 1939068 15-Jan-2018 14:14

One person supports this post

That is where you need to inspect headers and block the forwarding IP which will be the exploited relay/domain

I've given up on their own 99% and reporting to spamcop which then mails the VPS abuse. At the least cause a blacklist

1101

1728 posts

Uber Geek
+1 received by user: 416

# 1939577 16-Jan-2018 10:16

If you're getting bombardered with spam, and its such an issue...

consider that email adress as trashed . get a new email adress, possibly with a new provider
Millions of yahoo (ie xtra) email adresses & their contacts were stolen off yahoo servers some time back
If on spammers list , you will never stop incoming spam. One spammer gets blocked, another starts up the next day
Its a fight you cant win.

I have very few spam sent to my xtra email adress. Maybee one or 2 a day. Its not such a big issue to just delete them, rather than go
on a personal crusade against something that simply can never be eliminated.
If you are being flooded with spam, consider that email adress as trashed .

to try & mitigate spam
never try & unsubscribe to spam (a few exceptions) . That just comfirms the email adress & you may get more spam
Dont ever give out your main email adress to websites, software registration etc. Get a gmail email & use that as a email dump for sites & software
that require your email adress. If you give out your email to 3rd parties , that can be passed on or onsold to marketers (this does happen)

check your email adress here
https://haveibeenpwned.com/

hio77

'That VDSL Cat'
10207 posts

Uber Geek
+1 received by user: 2450

Trusted

Spark

Subscriber

# 1939581 16-Jan-2018 10:18

I'm pretty out of touch with the Email folks these days.

I have been looped into some ongoing stuff for this and can confirm, lately it's gotten far worse and is being very much looked into (internally it has been heavily noticed by users of xtramail too.)

Can't really confirm too much more for now from here, but thought it's worth letting yal know, You are heard :)

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

FOCUS0

64 posts

Master Geek
+1 received by user: 3

# 1941222 16-Jan-2018 23:14

Thanks for the responses,

Glad to know that it is a general issue presently - thanks

Dumping my email address is not an option

My question was a technical one -

Using the Filter ... why did the rule "Content" which is dealing with the body of the Email message

fail to detect the words "sereduc" which is in the HTML code as a link as previously quoted

I read through the Business document for Spark EMAIL on and dealing with HTML is not mentioned in the rules.

pillmonsta

73 posts

Master Geek
+1 received by user: 16
Inactive user

# 1941236 17-Jan-2018 05:29

FOCUS0:

Thanks for the responses,

Glad to know that it is a general issue presently - thanks

Dumping my email address is not an option

My question was a technical one -

Using the Filter ... why did the rule "Content" which is dealing with the body of the Email message

fail to detect the words "sereduc" which is in the HTML code as a link as previously quoted

I read through the Business document for Spark EMAIL on and dealing with HTML is not mentioned in the rules.

Al

I had a client call yesterday re: xtramail spam, still haven't seen Yahoo levels yet though. Thank God. lol

lisati

60 posts

Master Geek
+1 received by user: 3

# 1941295 17-Jan-2018 09:18

I just took a look at Spark's FB page - the complaints are coming in thick and fast. I'm thankful that I'm not the only one who think something's a bit off with their choice of spam filtering techniques. As much as I dislike using Yahoo, I think they handle(d) unwanted mail a lot better. For starters, there's the report spam button, which does more than flick unwanted mail out of the way into a spam/junk folder.

pillmonsta

73 posts

Master Geek
+1 received by user: 16
Inactive user

# 1941314 17-Jan-2018 09:38

lisati:

I just took a look at Spark's FB page - the complaints are coming in thick and fast. I'm thankful that I'm not the only one who think something's a bit off with their choice of spam filtering techniques. As much as I dislike using Yahoo, I think they handle(d) unwanted mail a lot better. For starters, there's the report spam button, which does more than flick unwanted mail out of the way into a spam/junk folder.

Yahoo have been hacked 3 times. That's why Spark ditched them....

I would recommend Gmail tbh....Gmail have a great spam filter.

lisati

60 posts

Master Geek
+1 received by user: 3

# 1941339 17-Jan-2018 10:13

pillmonsta:

lisati:

I just took a look at Spark's FB page - the complaints are coming in thick and fast. I'm thankful that I'm not the only one who think something's a bit off with their choice of spam filtering techniques. As much as I dislike using Yahoo, I think they handle(d) unwanted mail a lot better. For starters, there's the report spam button, which does more than flick unwanted mail out of the way into a spam/junk folder.

Yahoo have been hacked 3 times. That's why Spark ditched them....

I would recommend Gmail tbh....Gmail have a great spam filter.

+1 for Gmail. I have accounts with them which sometimes come in useful when the outgoing spam filters used by Spark/SMX get their knickers in a twist when trying to forward multiple unwanted emails to Spamcop.

FineWine

794 posts

Ultimate Geek
+1 received by user: 222

Subscriber

# 1943522 19-Jan-2018 13:55

ok my 70yr old cousin this week has started to receive loads more spam from:

@Ww.co.nz (this one is the worst with close to 100 this week)

@buildingprojects.host

@wegolo.com

all with different alphanumerical prefixes.

Now these spam have only just started this week. She complained to me last weekend about her level of unwanted emails. Her sole internet/email access is via her iPhone 8plus and unfortunately in the past she has purchased a lot of stuff on line. She gave me her access to her email address so I logged in to her spark webmail account and spent over an hour spamming and blacklisting unwanted emails. (I have now reached the Blacklist list limit) Now that was last weekend and yet on Monday this week she installed the herald NZ app and signed up (which she did not have to - but unfortunately she did) now since then she has been receiving ton's of spam from the above @ suffix's. These are all new spam addresses. Just a coincidence or has the herald been naughty or hacked?

iMac 27" (late 2013), Airport Time Capsule + Airport Express, iPhone7, iPad6, iPad Mini2

Panasonic Blu-ray PVR DMR-BWT835 + Panasonic Viera TH-L50E6Z, Chromecast Ultra

1101

1728 posts

Uber Geek
+1 received by user: 416

# 1943575 19-Jan-2018 14:57

FineWine:

and spent over an hour spamming and blacklisting unwanted emails. (I have now reached the Blacklist list limit)

this is why Blacklists just dont work at this level.
A month from now all those blacklisted will be gone forever anyway and a new batch of spammers using new
email addresses will have taken their place. Or the same spammer will be using different email addresses to send from.

As you now see with the next batch of spammers you've now got.

spammers sending from a .nz email adress can be reported & prosecuted . NZ based spammers can be tracked down & punished under NZ Law
assuming the .nz adress isnt faked

Try here for .nz spammers
https://www.dia.govt.nz/Spam-Complain-About-Spam

https://www.reportspam.co.nz/

lisati

60 posts

Master Geek
+1 received by user: 3

# 1943576 19-Jan-2018 14:57

The graphs available on Spamcop's web page make interesting viewing, showing a sudden upsurge eariler this week.

I've seen Russian dating spam scattered over a number of email accounts, not just with Spark. The only pattern I've noticed is that the text is largely the same, and a referrence to various rambler[dot]ru email addresses contained in the message body; the messages track back to various different providers in different locations.

As for the Kiwibank phishing attempts I've seen, I don't think they actually originate at the .edu domains I've seen.

Oblivian

3170 posts

Uber Geek
+1 received by user: 412

# 1943680 19-Jan-2018 17:41

Seeing the same as you. had my only 2nd dating one last night. Originator was a hotmail server.

The kiwi bank from stanford spoof and vps hosting

so it seems they are doing the same as my SEO backlink friends.

Spins up a vps on amazon or similar free trial, cheap domain, install registration bot and smtp tool. have at it.

Time its shut down the damage is done for as little as $11

FineWine

794 posts

Ultimate Geek
+1 received by user: 222

Subscriber

# 1943736 19-Jan-2018 18:57

1101:

Try here for .nz spammers
https://www.dia.govt.nz/Spam-Complain-About-Spam

https://www.reportspam.co.nz/

Love it NOT

After following their instructions I attempted to forward one of many emails but it was bounced/rejected due to spam content.

Edited due non completion

iMac 27" (late 2013), Airport Time Capsule + Airport Express, iPhone7, iPad6, iPad Mini2

Panasonic Blu-ray PVR DMR-BWT835 + Panasonic Viera TH-L50E6Z, Chromecast Ultra

Oblivian

3170 posts

Uber Geek
+1 received by user: 412

# 1945914 24-Jan-2018 10:52

Must be Kiwibank day

Where subject like *Kiwibank*lock* = bin

Surely possible...

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | ... | 20