29 May 2019: Emotet malspam: 'Mykolab Ref Id: I32560' [Was: Re: Spamming of NANOG list members]

Wed May 29 16:16:59 UTC 2019

> On May 29, 2019, at 9:14 AM, Niels Bakker <niels=nanog at bakker.net> wrote:
> 
> * fergdawgster at mykolab.com (Paul Ferguson) [Wed 29 May 2019, 18:04 CEST]:
>> This is apparently (?) part of a wave of spoofed malspams impersonating messages with ‘weaponized' attachments sent to the NANOG (North American Network Operators Group) mailing list.
> 
> They're not sent to the list, they're sent directly to posted who have previously posted to the list.  NANOG have no way to stop these.
> 
> 
> 	-- Niels.

Understood, but I figured folks might like to know what they might be dealing with.

Cheers,

- ferg

—
Paul Ferguson
Principal, Threat Intelligence
Gigamon
Seattle, Washington, USA

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: Message signed with OpenPGP
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190529/180d0fa8/attachment.sig>