On Tue, Nov 03, 2015 at 11:14:18PM -0800, Rick Moen wrote:
On September 26, 2015, I saw the first pair of examples of what appeared to be much smarter SMTP spam. Both the envelope 'From ' sender and the internal 'From: ' sender were credibly forged to impersonate two personal friends, Michael Siladi and Alison Stern. That wasn't new: Forging of the envelope sender has been a well-tested art since the infamous revenge-spam attack against Joe Doll in 1997 that gave the world the term 'Joe-job'.[1]
are they spamming to the list or directly to list subscribers? spamming a list and forging a sender-address trawled from the list archives (or via a spammer subscribing and archiving the list) has long been a spammer practice. ditto with sending to addresses known to be subscribed to a list, with forged from address also known to be subscribed. craig -- craig sanders <cas@taz.net.au>