Seeing a recent rash of fake job application spam coming from your
servers..
Can't remember which #malware engine uses this pattern off the top of my
head, but the email template contains an .xls password protected, with
the '1234'
X-TOI-EXPURGATEID: 150726::1592860321-00008954-87EE5AE6/19/6861980920
SUSPECT MAIL-COUNT
Looks like your systems are aware that the sending count is probably
compromised, but you are NOT rate limiting them?
Examples..
Return-Path: <stefan.hoenn...@t-online.de>
Return-Path: <dduwenb...@t-online.de>
Subjects: <Regarding job|position>
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
