<html v="urn:schemas-microsoft-com:vml" o="urn:schemas-microsoft-com:office:office" w="urn:schemas-microsoft-com:office:word" x="urn:schemas-microsoft-com:office:excel" m="http://schemas.microsoft.com/office/2004/12/omml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="Generator" content="Microsoft Word 15 (filtered medium)" /><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang="EN-US" link="#0563C1" vlink="#954F72">That description is almost identical to that of an email spam attack committed against Yahoo Mail address books over the last couple of years. I have gotten several of them, which purport to be from people in whose address books I would expect to be, but they aren't sent from the Yahoo account.<br><br><div class="gmail_quote">On June 12, 2016 5:17:06 PM EDT, frnkblk@iname.com wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div class="WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Neither att.net or sbcglobal.net or swbell.net or pacbell.net have SPF records … if they did, that would help filter out such messages.<p></p></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><p> </p></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Frank<p></p></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><p> </p></span></p><p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Outages [mailto:outages-bounces@outages.org] <b>On Behalf Of </b>Neil Ticktin via Outages<br /><b>Sent:</b> Sunday, June 12, 2016 12:42 PM<br /><b>To:</b> Outages@outages.org<br /><b>Subject:</b>
[outages] ATT, SBC, PacBell - spam storm?<p></p></span></p><p class="MsoNormal"></p><p> </p><div><p class="MsoNormal">Hi all,</p><p></p><div><p class="MsoNormal"></p><p> </p></div><div><p class="MsoNormal">While not really an "outage" -- is anyone seeing a mass of emails this morning from users with accounts from AT&T, SBC Global, PacBell and other related providers? These emails often have a format that looks like the below (redacted info so that it doesn't look like spam to filters).</p><p></p></div><div><p class="MsoNormal"></p><p> </p></div><div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black">[redacted link to google which is a redirect to a page about weight loss]</span><span
style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black"><p></p></span></p><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black"><p> </p></span></p></div><p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">Sent from my iPad</span><span style="font-size:8.5pt"><br /></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">Begin forwarded message:</span><span style="font-size:8.5pt"><br /><br /></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">> the more light you
pour upon it, the more it will One person with a belief is equal to a force of ninety-nine who have only interest.</span><span style="font-size:8.5pt"><br /></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">> </span><span style="font-size:8.5pt"><br /></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">> From: [redacted user name of person I know] -[redacted email of someone I know]@att.net-</span><span style="font-size:8.5pt"><br /></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">> Date: Sat, 12 Jun 2016 08:04:00 +0000</span><span style="font-size:8.5pt"><br
/></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">> To: Suzie Talianis</span><span style="font-size:8.5pt"><br /></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">> Subject: Fw(2): [redacted name I know] pg</span><span style="font-size:8.5pt"><br /></span><span style="font-size:8.0pt;font-family:"Tahoma",sans-serif;color:black"> </span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black">> </span><span style="font-size:8.5pt"><br /></span><span style="font-size:8.5pt;font-family:"Tahoma",sans-serif;color:black"> > Mail Code: cndajv</span></p><p></p></div></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p
class="MsoNormal"></p><p> </p></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal">I'm seeing this from a number of users this morning on AT&T, SBC Global, PacBell and others -- and it's clear that someone has access to their address books, but they are not sending from their accounts when you look at the headers.</p><p></p></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal"></p><p> </p></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal">Anyone else seeing this? Any thoughts on what these users can do to not be spoofed on accounts with these major services?</p><p></p></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal"></p><p> </p></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal">Thanks!</p><p></p></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal"></p><p> </p></div><div
style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal">Neil</p><p></p></div><div style="margin-left:6.0pt;margin-right:6.0pt"><p class="MsoNormal"></p><p> </p></div></div></div><p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br />Outages-discussion mailing list<br />Outages-discussion@outages.org<br /><a href="https://puck.nether.net/mailman/listinfo/outages-discussion">https://puck.nether.net/mailman/listinfo/outages-discussion</a><br /></pre></blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>