Hi Brazil uses a system of electronic invoices called NFe.
I was in contact with oobj.com.br one of the companies running that system after more and more of those NFe emails started hitting recipients here. This attracts scammer which send spoofed electronic invoices to companies in the hope they would be mistake be paid. The scammer don't care even if they sent them to recipients not located in Brazil who don't know what those NFe XML attachments are. One of those, probably high volume scammer (same Windows Hostname in the Received Lines) is active for months and has been reported multiple times to the TIM Brazil NOC (their abuse desk email is invalid) and to CERT Brazil. It possibly is a trojanized machine. I get read confirmations from the NOC. So my Emails are being received. Nothing has changed since, I get no human replies, and as TIM Brazil happily keeps changing the IP address of the scammer, ip blacklists are not so effective. Matching the content also is not possible as the fake NFe look very much like the real ones. Does anyone have any contact to TIM Brazil and could either forward this email to them or tell me who to contact? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop