[External] Re: Anyone else getting the 'spam' bomb threat?

Kain, Becki (.) bkain1 at ford.com
Thu Oct 21 13:24:26 UTC 2021


So what ever happened to the threatener?  Was he caught?

From: NANOG <nanog-bounces+bkain1=ford.com at nanog.org> On Behalf Of Martin Hannigan
Sent: Wednesday, October 20, 2021 11:44 PM
To: Omar Haider <mrhdr405 at gmail.com>
Cc: nanog <nanog at nanog.org>
Subject: Re: [External] Re: Anyone else getting the 'spam' bomb threat?

WARNING: This message originated outside of Ford Motor Company. Use caution when opening attachments, clicking links, or responding.


Hi Omar,

This is likely a hoax. Probably a “joe job” - making it appear as someone innocent is responsible. Its good to share this info to raise  network operators awareness since even if it is fake its concerning how many received it.

I’ll leave it to the pros here to tell us if we shouldn’t worry.

Warm regards,

-M<



On Wed, Oct 20, 2021 at 21:18 Omar Haider <mrhdr405 at gmail.com<mailto:mrhdr405 at gmail.com>> wrote:
I feel uncomfortable in this newsletter

On Wed, Oct 20, 2021, 10:56 AM Martin Hannigan <hannigan at gmail.com<mailto:hannigan at gmail.com>> wrote:


I put what we received up on pastebin entirely with headers (and redacted our info).

https://pastebin.com/kLjPm8Nk<https://clicktime.symantec.com/35Wa5BUMZ7c8nUrobeoNvR67Vc?u=https%3A%2F%2Fpastebin.com%2FkLjPm8Nk>

Warm regards,

-M<



On Wed, Oct 20, 2021 at 9:19 AM Radu-Adrian Feurdean <nanog at radu-adrian.feurdean.net<mailto:nanog at radu-adrian.feurdean.net>> wrote:
On Tue, Oct 19, 2021, at 16:00, Hunter Fuller via NANOG wrote:
> We have a distinct abuse address (not just abuse@) and that is where
> the messages were sent.
>
> We didn't receive the bomb threat ones. We only received the (somewhat
> more amusing) messages entitled "Your network has been PWNED" and
> "Fuck you".

Hi,

We got the same here at France-IX. It was on friday 15th. Hopefully, they "PWNED" all our Cisco and Mikrotik routers (of which we have none).

> The situation loses its humor entirely with the introduction of bomb
> threats. Seems like a script kiddie taking things way too far.

I heard that yesterday (19th) evening there was law enforcement deployment and evacuation in the area of a major Paris (FR, EU) telco hotel, apparently due to "threats to a business in the area". Details (popcorn) on FrNOG (in french) : https://www.mail-archive.com/[email protected]/msg67540.html<https://clicktime.symantec.com/3P7mG6Lx8b2Qo7sjs1uqaSZ7Vc?u=https%3A%2F%2Fwww.mail-archive.com%2Ffrnog%40frnog.org%2Fmsg67540.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20211021/7caad56f/attachment.html>


More information about the NANOG mailing list