Re: [mailop] Uptick in Google Groups spam?

2024-08-29 Thread Gellner, Oliver via mailop
On 28.08.2024 at 14:50 Xavier Beaudouin via mailop wrote: >>> I'm wondering what SpamAssassin rule to boost, but it seems like this >>> operator has mostly covered their bases? KAM_INFOUSMEBIZ might be worth >>> boosting. >> >> We have seen an increase of spam and phishing emails from Google >>

Re: [mailop] Uptick in Google Groups spam?

2024-08-29 Thread Gellner, Oliver via mailop
On 28.08.2024 at 16:18 Matus UHLAR - fantomas via mailop wrote: > On 28.08.24 07:46, Robert Giles via mailop wrote: >> So dropping Google Groups entirely: since Google's infrastructure is >> "unblockable", I'd suspect keying on a Google Groups-specific header, >> but how are you (and other folks)

Re: [mailop] Gmail not accepting bounces coming from vacation messages because of null sender and SPF/DKIM

2024-08-29 Thread Gellner, Oliver via mailop
On 28.08.2024 at 21:31 Marco Moock via mailop wrote: > Am 27.08.2024 um 12:56:18 Uhr schrieb Eduardo Diaz Comellas via mailop: >> I think that sending the vacation messages with null sender is an >> standard practise and the best way to avoid loops. I've found no >> problems with any other email p

[mailop] Understanding why a spammer is doing this

2024-08-29 Thread Mark Fletcher via mailop
Hi All, I run groups.io, an email groups hosting service, similar to Google Groups. Over the past couple of years, we've had several instances of the following behavior: - Someone controlling several Yahoo/Hotmail/Gmail accounts will sign them up to mailing lists. Each address will sign up for 1-

Re: [mailop] Super dumb gmail request ...

2024-08-29 Thread Brandon Long via mailop
On Wed, Aug 28, 2024 at 11:06 PM Michael Rathbun via mailop < mailop@mailop.org> wrote: > On Wed, 28 Aug 2024 11:51:24 -0700, Brandon Long via mailop > wrote: > > >Typically, the phone number use in cases like this is part of trying to > >prevent bulk operations. > > All I can personally say is t

Re: [mailop] Understanding why a spammer is doing this

2024-08-29 Thread Viktor Dukhovni via mailop
On Thu, Aug 29, 2024 at 09:58:19AM -0700, Mark Fletcher via mailop wrote: > Hi All, > Over the past couple of years, we've had several instances of the following > behavior: > > - Someone controlling several Yahoo/Hotmail/Gmail accounts will sign them > up to mailing lists. Each address will sign

Re: [mailop] Understanding why a spammer is doing this

2024-08-29 Thread John Levine via mailop
According to Viktor Dukhovni via mailop : >> - Months later, they will forward the messages they've received from these >> lists, unmodified, to many (seemingly) random people, all at once > >How often can you reasonably rotate your DKIM signing keys (really >mint a new selector and key)? Good tho

Re: [mailop] [External] Understanding why a spammer is doing this

2024-08-29 Thread Kevin A. McGrail via mailop
Mark, I don't think I've seen this behavior but I'll have to watch out for it. Overall, I would oposit that they are sending legitimate traffic to mask other bad emails at the same time  in an attempt to change the signal to noise ratios and/or to raise their domain/IP/system reputation. And

Re: [mailop] Super dumb gmail request ...

2024-08-29 Thread Michael Rathbun via mailop
On Thu, 29 Aug 2024 11:29:12 -0700, Brandon Long via mailop wrote: >> "Don't be evil", indeed. Missed that one by a mile. >> > >The banality of evil or something, but trying to protect your personal >information is generally considered >a good idea and enforced legally around the world. What is

Re: [mailop] Super dumb gmail request ...

2024-08-29 Thread Viktor Dukhovni via mailop
On Wed, Aug 28, 2024 at 12:03:01PM -0700, Brandon Long wrote: > > Welcome to two-factor denial of service. I try to resist signing up for > > such baked-in disasters as much as I can, but the powers that be (hello > > GitHub) have made it impossible in many cases. > > > > It is a sad state of aff

Re: [mailop] [External] Understanding why a spammer is doing this

2024-08-29 Thread Viktor Dukhovni via mailop
On Thu, Aug 29, 2024 at 04:02:49PM -0400, Kevin A. McGrail via mailop wrote: > And reading some of the other responses, because the emails are being > forwarded, I'm assuming that DKIM wouldn't pass [...] The most signficant benefit of DKIM message content authentication over SPF is precisely tha