[ADXA] BEWARE fake emails coming thru the ADXA system - Badattachment likely!!!

[Steven Rutledge]

Joel is correct.  You're chasing your tail trying to figure out how this 
happens because there are so many ways.  It could have happened via your 
email providers server, especially if you use web mail.  No way to 
really know for sure.  The Internet is a dangerous place.  Use 
sufficient anti-virus, strong passwords and open NO attachments unless 
you know you're supposed to receive them.

Russia, China and Iran have free rein of our Internet.  However, most of 
the attacks on personal computers are used for Denial of Service attacks 
on a specific web site.

I received a letter from OPM several years ago telling me that my entire 
SF-86, personal data, application for a security clearance update, had 
been lifted by a foreign government.  So, consider wandering into 
cyber-space like being shot at on the battlefield. You just hope one of 
those bullets doesn't hit you.

The US has put itself in a very vulnerable position because we depend on 
the internet for everything.  ATT had ALL of the 911 servers in their 
frame room in Nashville with no back-up.  The only reason we haven't 
been crippled is because the enemy hasn't chosen to.  Sorry for the rant 
but I used to do this for a living.

Steve, QQ

On 1/5/2021 9:20 AM, w5zn at w5zn.org wrote:
>
> No, that's not what it means. Bill and Ron's computer may not even be 
> the infected computer.
>
> If one person's computer is infected and that person's address book in 
> his/her email client is harvested it will start sending emails out to 
> everyone in the address book and then start using those emails as the 
> "sent from" email address as well.
>
> It may not have originated from Bill or Ron's computer but from 
> someone who had their email address. It could be anyone and those just 
> happen to be the first email addresses that are being mimicked and, as 
> soon as someone opens the attachment it has found another harvesting 
> ground!!!
>
> ZN
>
>
> On 2021-01-05 08:03, Sandy Hutson wrote:
>
>> Thanks for a very likely possibility Joel. That would mean Bill's and 
>> Ron's PCs were infected from _somewhere in common_ to a ham radio 
>> operator's list. I mostly agree with that scenario.
>>
>>    Bill's came to another personal email address I have, and Ron's 
>> came to my ADXA forwarded email address. IIWII.... BE CAREFUL as you 
>> say, Joel.
>>
>> 73 all ADXA members,
>>
>> San
>>
>> Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for 
>> Windows 10
>>
>> *From: *w5zn at w5zn.org <mailto:w5zn at w5zn.org>
>> *Sent: *Tuesday, January 5, 2021 8:56 AM
>> *To: *Sandy Hutson <mailto:k5yy1 at cox.net>
>> *Cc: *adxa at mailman.qth.net <mailto:adxa at mailman.qth.net>
>> *Subject: *Re: [ADXA] BEWARE fake emails coming thru the ADXA system 
>> - Badattachment likely!!!
>>
>> San,
>>
>> What has most likely happened is an individual's computer has been 
>> infected and the emails are being harvested from there, not the ADXA 
>> reflector system.
>>
>> Regardless, your advice is important. BE CAREFUL!
>>
>> ZN
>>
>> On 2021-01-05 07:44, Sandy Hutson wrote:
>>
>>     Got _strange emails_ from W5SJ and K5XK to "ham op" and sent to
>>     my ADXA email address. Both were from DIFFERENT strange senders
>>     like wilfredoperry at perry.cl <mailto:wilfredoperry at perry.cl> in
>>     addition to the K5XK's normal address in front of that. Both had
>>     an attachment I was asked to click on. The attachment square was
>>     named Form W-9.doc and had 196.09KB of information inside,
>>     supposedly. BE CAREFUL what you open. These things have happened
>>     before thru the ADXA list of members thru their ADXA email
>>     addresses. It will likely hack into your ADXA system or member
>>     comments. Not sure. Help, anyone?
>>
>>        Just trying to make you all aware. Came thru to me at 7:09AM
>>     today.
>>
>>     San YY
>>
>>     Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986>
>>     for Windows 10
>>
>> ______________________________________________________________
>> ADXA mailing list
>> Home: http://mailman.qth.net/mailman/listinfo/adxa 
>> <http://mailman.qth.net/mailman/listinfo/adxa>
>> Help: http://mailman.qth.net/mmfaq.htm <http://mailman.qth.net/mmfaq.htm>
>> Post: mailto:ADXA at mailman.qth.net <mailto:ADXA at mailman.qth.net>
>>
>> This list hosted by: http://www.qsl.net <http://www.qsl.net>
>> Please help support this email list: http://www.qsl.net/donate.html 
>> <http://www.qsl.net/donate.html>
>>
>
> ______________________________________________________________
> ADXA mailing list
> Home: http://mailman.qth.net/mailman/listinfo/adxa
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:ADXA at mailman.qth.net
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.qth.net/pipermail/adxa/attachments/20210105/15f45d9c/attachment-0001.html>