Spamming of NANOG list members

Paul Ferguson fergdawgster at mykolab.com
Sat Jun 1 04:15:04 UTC 2019


On 5/31/2019 8:05 PM, Richard wrote:

> On 5/31/19 8:07 PM, Niels Bakker wrote:
>> * bryan at shout.net (Bryan Holloway) [Sat 01 Jun 2019, 01:54 CEST]:
>>> Anybody else noticed a significant uptick in these e-mails?
>>>
>>> When I first saw this thread, I hadn't seen any. A couple days later,
>>> I got my first one. (yay!) Now I'm getting 2-3 a day. (yay?)
>>
>> Yes.  It's pretty annoying.  And somebody seems to be burning through
>> a lot of stolen credentials.  I wonder what the success rate is...
>>
>>
>>     -- Niels.
>>
>>
>     I am getting several a day as well as ugly MS Word based trojan.
> 
>     They come to me from all over the world with the subject line:
> 
>     "NANOG Payment Remittance Advice"
> 
>     I agree with Niels, someone or some spamming outfit is burning
> 
>     through quite a bit of stolen credentials.
> 
>     Richard Golodner
> 
>     Infratection
> 


It's Emotet (again).

Cheers,

- ferg


-- 
Paul Ferguson
Principal, Threat Intelligence
Gigamon
Seattle, WA  USA



More information about the NANOG mailing list