Re: Someone's scraping NANOG for phishing purposes again

2017-02-10 Thread valdis . kletnieks
On Fri, 10 Feb 2017 13:22:31 -0500, Rich Kulawiec said: > On Fri, Feb 10, 2017 at 11:56:02AM -0600, Andrew Latham wrote: > > On a great many mailing lists, Suresh is spot on as this looks more like > > infected user but headers would be good. The one I found in my mailbox yesterday tends to suppor

Re: Someone's scraping NANOG for phishing purposes again

2017-02-10 Thread Rich Kulawiec
On Fri, Feb 10, 2017 at 11:56:02AM -0600, Andrew Latham wrote: > On a great many mailing lists, Suresh is spot on as this looks more like > infected user but headers would be good. Here are a couple recent specimens that appear to fit this pattern:

Re: Someone's scraping NANOG for phishing purposes again

2017-02-10 Thread Andrew Latham
On a great many mailing lists, Suresh is spot on as this looks more like infected user but headers would be good. On Fri, Feb 10, 2017 at 11:46 AM, Suresh Ramasubramanian < ops.li...@gmail.com> wrote: > > Or a nanog member might be infected and the malware is scraping his mailbox for bogus froms.

Re: Someone's scraping NANOG for phishing purposes again

2017-02-10 Thread Suresh Ramasubramanian
Or a nanog member might be infected and the malware is scraping his mailbox for bogus froms. Got headers? On 10/02/17, 9:40 AM, "NANOG on behalf of Alexander Harrowell" wrote: I'm getting suspicious e-mail pretending to come from leading NANOGers. Not the first time this has happened,

Re: Someone's scraping NANOG for phishing purposes again

2017-02-10 Thread Alexander Harrowell
Interestingly, the phishes are both using NANOG members' names as forged From: fields, they're also being sent to NANOG people specifically - each one comes with half a dozen addresses of which usually one or two are familiar to me as frequent contributors. On Fri, Feb 10, 2017 at 5:42 PM, Josh Lu

Re: Someone's scraping NANOG for phishing purposes again

2017-02-10 Thread Josh Luthman
Thank you for the notice. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Feb 10, 2017 12:42 PM, "Alexander Harrowell" wrote: > I'm getting suspicious e-mail pretending to come from leading NANOGers. Not > the first time this has happened, but y