[Outages-discussion] [outages] ATT, SBC, PacBell - spam storm?

[Jay Ashworth]

That description is almost identical to that of an email spam attack committed against Yahoo Mail address books over the last couple of years. I have gotten several of them, which purport to be from people in whose address books I would expect to be, but they aren't sent from the Yahoo account.

On June 12, 2016 5:17:06 PM EDT, frnkblk at iname.com wrote:
>Neither att.net or sbcglobal.net or swbell.net or pacbell.net have SPF
>records … if they did, that would help filter out such messages.
>
> 
>
>Frank
>
> 
>
>From: Outages [mailto:outages-bounces at outages.org] On Behalf Of Neil
>Ticktin via Outages
>Sent: Sunday, June 12, 2016 12:42 PM
>To: Outages at outages.org
>Subject: [outages] ATT, SBC, PacBell - spam storm?
>
> 
>
>Hi all,
>
> 
>
>While not really an "outage" -- is anyone seeing a mass of emails this
>morning from users with accounts from AT&T, SBC Global, PacBell and
>other related providers?  These emails often have a format that looks
>like the below (redacted info so that it doesn't look like spam to
>filters).
>
> 
>
>[redacted link to google which is a redirect to a page about weight
>loss]
>
> 
>
>      Sent from my iPad
>      Begin forwarded message:
>
>> the more light you pour upon it, the more it will One person with a
>belief is equal to a force of ninety-nine who have only interest.
>      > 
>> From: [redacted user name of person I know] -[redacted email of
>someone I know]@att.net-
>      > Date: Sat, 12 Jun 2016 08:04:00 +0000
>      > To: Suzie Talianis
>      > Subject: Fw(2): [redacted name I know] pg
>      > 
>     > Mail Code: cndajv
>
> 
>
>I'm seeing this from a number of users this morning on AT&T, SBC
>Global, PacBell and others -- and it's clear that someone has access to
>their address books, but they are not sending from their accounts when
>you look at the headers.
>
> 
>
>Anyone else seeing this?  Any thoughts on what these users can do to
>not be spoofed on accounts with these major services?
>
> 
>
>Thanks!
>
> 
>
>Neil
>
> 
>
>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Outages-discussion mailing list
>Outages-discussion at outages.org
>https://puck.nether.net/mailman/listinfo/outages-discussion

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages-discussion/attachments/20160612/ceacbce9/attachment.html>