Spam bombardment since 26-5-14

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Spam bombardment since 26-5-14

Oblivian

7278 posts

Uber Geek

ID Verified

#146780 28-May-2014 23:17

Normally quite like the spam filtering.. I never seem to see any.

But last 3 days have been filled with paypal reset/login phishing getting through (funny given the ebay hack, but don't think my orcon address is listed as a backup/secondary contact in my account), and BNZ account validation phishing (6 today alone)

I'm forwarding as attachment to trainspam@orcon but is this actually viable now. One would have thought the from/origin matching a bunch of odd labelled users/domains (and contained in the links) would set off alarm bells already with the fairly smart filtering.

I mean, from 'support@bnz.co.nz' - aka boletin@viajar.c0m. uuuhhmmmm

FlameBeard

344 posts

Ultimate Geek

Trusted

#1055634 29-May-2014 08:49

Have you tried blocking the domains? Also you haven't mentioned which email platform you're sitting on.

4th gen i7 Haswell 4770k, G.SKILL RipjawsX 16GB (4x4 Gb) DDR3 2400MHz, x1 GTS 460, Intel 180Gb 530 Series SSD, x1 Seagate 1Tb HDD, x1 Seagate 2Tb HDD, Modular 850w PSU, R.O.G. Maximus VII Formula mobo, Cooler Master Storm Trooper Chassis, Cooler Master V8 CPU cooler

"Five exclamation marks, the sure sign of an insane mind." - Terry Pratchett

No longer work for Orcon

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

Oblivian

7278 posts

Uber Geek

ID Verified

#1056059 29-May-2014 16:22

Orcon Webmail which when I get home is popped :)

Set to mark/tag with spam

Just a little odd that its been clean for years and just recently a lot more have gotten through without even been suspiciously marked as such

Is the trainspam reporting method still active? and is it global or personal to the address

Athlonite

1828 posts

Uber Geek
Inactive user

#1056089 29-May-2014 16:47

Yes I'm still getting spam from places that should not have been able to access my Orcon email address is it marked as spam by Orcon NO is my name in the TO field more often than not NO

and yes I block by account name / domain name but still the spam keeps coming I've only ever used my real address to log into NZ based etail stores or here on geekzone so who's been hacked

FireEngine

1223 posts

Uber Geek

Trusted

#1056122 29-May-2014 17:58

From our FAQ:

FAQ: HOW DO I CHANGE MY SPAM FILTER SETTINGS?

The Orcon spam filter is automatically configured to cut out as much spam as possible. Despite this, spammers are always developing new tricks that means some might slip through. Also, the spam filter might be a little too strict, and you may not be receiving emails you actually want to receive.

In these cases, you may want to change the spam filter settings for your account.

CHANGING THE SPAM FILTER SETTINGS

The easiest way to change the settings is via My Orcon. First, click here to log in, then select Email Settings from the menu, and click Configure spam blocking. You then have the option to choose how you would the filter to treat spam, and also how strong you'd like the filter to be.

No issues are reported with our spam filtering that I am aware of but I have asked the team to double-check. Sorry I'm not familiar with that trainspam email address but I'll ask tomorrow.

Regards FireEngine

Oblivian

7278 posts

Uber Geek

ID Verified

#1056129 29-May-2014 18:23

Yeah I set it to fairly low some time back when I was suspicious of real emails getting binned. So adjusted to mark only. But never see anything trapped in that way even set on low as it is. Only assuming the ruthlessness is usually pretty good

Which is what made me query if there has been reports the last few days since the ebay debacle of an increase.
Wouldn't think 6+ BNZ phishing attacks a day to 1 user would go un-noticed if that was replicated to other users across the board :)

Trainspam was dug from an olllldd thread. But if its pointless in me using it I'll stop. However good to know if there is a known auto-lean address the crowd can assist with

FireEngine

1223 posts

Uber Geek

Trusted

#1056183 29-May-2014 19:32

We have a new mail platform with new spam system being commissioned, I suspect it is still being fine-tuned in this regard

The team report normal volumes so it looks like just a detection issue, thanks for the feedback.

Regards FireEngine

LittleDude

164 posts

Master Geek

Lifetime subscriber

#1056728 30-May-2014 18:56

Normally I get no spam(I have the filter set on high) but 2 days in a row I have received emails selling "Vigara". I'm sure I'm not the only one that received these. I would hope the filters in place would not be so easily fooled by the deliberate "spelling mistake". I don't see an option for a custom(personalized) spam filter apart from raising the threshold or am I missing something?