malware warning

Wed Jul 19 13:29:39 UTC 2023

Yep, been getting SPAM from the list for quite a while now. ☹  Rather from someone harvesting from the list. 

Dennis Burgess, Mikrotik Certified Trainer
MTCNA, MTCRE, MTCWE, MTCTCE, MTCINE, MTCSE, HE IPv6 Sage, Cambium ePMP Certified 
Author of "Learn RouterOS- Second Edition” 
Link Technologies, Inc -- Mikrotik & WISP Support Services 
Office: 314-735-0270  Website: http://www.linktechs.net 
Need to Automate MikroTik Backups:  https://cloud.linktechs.net 
Create Wireless Coverage’s with www.towercoverage.com 

-----Original Message-----
From: NANOG <nanog-bounces+dmburgess=linktechs.net at nanog.org> On Behalf Of Randy Bush
Sent: Tuesday, July 18, 2023 7:03 PM
To: North American Network Operators' Group <nanog at nanog.org>
Subject: malware warning

malware email is so common i normally do not warn of it.  but, in this case, the attacker is extracting quotes from nanog and luring folk into clicking.  e.g.

From: takahashi at fukushitrust.com
Subject: Re: jon postel
To: Randy Bush <randy at psg.com>
Date: Mon, 17 Jul 2023 04:01:47 -0700

Hello! 

We would like to present to you several alternatives for presentations and find out your thoughts and opinions, please let us know whatever you think about it. 

https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdognibs.com%2f8jh%2fogr%2fg0h436ttqbw&umid=AD2D8C0B-00CB-C606-B620-46056820F8C9&auth=079c058f437b7c6303d36c6513e5e8848d0c5ac4-f36651c1d6f10141663aea6b1fe748c4448756cb 

Waiting for your reply 

 > Does anyone have any stories about working with or near John they > would like to share with the  list? It would definitely make my day > to hear more about the early internet somewhere around i have a  protocol violation ticket he issued. --- Who says that routing unallocated address space is ungood? --  Randy Bush Routing unallocated address space is ungood! -- Jon Postel randy 

----

and

From: office at daimontrade.com.ua
Subject: Re: Reverse DNS for eyeballs?
To: Randy Bush <randy at psg.com>
Date: Tue, 18 Jul 2023 02:56:36 -0700

Hello, 

Modified paperwork regarding For this month. Kindly read through it attentively. 

https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fsoocoop.net%2fe24%2f1s0%2f7ckl0icu7h&umid=AD2D8C0B-00CB-C606-B620-46056820F8C9&auth=079c058f437b7c6303d36c6513e5e8848d0c5ac4-d3bde3aae320235c42f1c7b28e3294c7ef572a81 

We appreciate your attention. 

 > I would say the absence of reverse DNS tells useful info to receiving > MTAs - to preferably not  accept. yep 