Is anyone tracking the "Fw: New Message" joe-job spammer?

Tue Oct 27 20:23:57 UTC 2015

I've seen this attack on a private list I'm on as well. It wasn't clear if the subscribed address was being spoofed or if the user had an infected computer. 

--
Mike Conlen

> On Oct 26, 2015, at 13:27, Patrick W. Gilmore <patrick at ianai.net> wrote:
> 
> I have 521 messages that match:
>    To:        nanog*
>    Subject:    new message
> 
> In the last week. Obviously that includes things like Jay’s message below, but still a lot more than 100.
> 
> It also hit outages@, and probably other places.
> 
> Of course, I’m very upset about that. After 500+ tries, they did not spoof my name once!!! Guess I’m not important enough. <pout>
> 
> -- 
> TTFN,
> patrick
> 
>> On Oct 25, 2015, at 12:11 PM, Jay Ashworth <jra at baylink.com> wrote:
>> 
>> Cause if so I got about 100 examples from last night I can send you if
>> you think they'll help.  :-)
>> 
>> Cheers,
>> -- jra
>> 
>> -- 
>> Jay R. Ashworth                  Baylink                       jra at baylink.com
>> Designer                     The Things I Think                       RFC 2100
>> Ashworth & Associates       http://www.bcp38.info          2000 Land Rover DII
>> St Petersburg FL USA      BCP38: Ask For It By Name!           +1 727 647 1274
> 