[Outages-discussion] [outages] ATT, SBC, PacBell - spam storm?

[frnkblk at iname.com]

Neither att.net or sbcglobal.net or swbell.net or pacbell.net have SPF records … if they did, that would help filter out such messages.

 

Frank

 

From: Outages [mailto:outages-bounces at outages.org] On Behalf Of Neil Ticktin via Outages
Sent: Sunday, June 12, 2016 12:42 PM
To: Outages at outages.org
Subject: [outages] ATT, SBC, PacBell - spam storm?

 

Hi all,

 

While not really an "outage" -- is anyone seeing a mass of emails this morning from users with accounts from AT&T, SBC Global, PacBell and other related providers?  These emails often have a format that looks like the below (redacted info so that it doesn't look like spam to filters).

 

     [redacted link to google which is a redirect to a page about weight loss]

 

      Sent from my iPad
      Begin forwarded message:

      > the more light you pour upon it, the more it will One person with a belief is equal to a force of ninety-nine who have only interest.
      > 
      > From: [redacted user name of person I know] -[redacted email of someone I know]@att.net-
      > Date: Sat, 12 Jun 2016 08:04:00 +0000
      > To: Suzie Talianis
      > Subject: Fw(2): [redacted name I know] pg
      > 
     > Mail Code: cndajv

 

I'm seeing this from a number of users this morning on AT&T, SBC Global, PacBell and others -- and it's clear that someone has access to their address books, but they are not sending from their accounts when you look at the headers.

 

Anyone else seeing this?  Any thoughts on what these users can do to not be spoofed on accounts with these major services?

 

Thanks!

 

Neil

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages-discussion/attachments/20160612/1a956d51/attachment.html>