[CW] spam sent from my email address

[D.J.J. Ring, Jr.]

Dan,

Your email came through the qth.net servers to the cw list.

Here's part of the headers - maybe this will give you a clue - I noticed
'android' in the words:

Received: from [189.79.169.68] by web182206.mail.bf1.yahoo.com via HTTP;
	Fri, 14 Sep 2012 12:12:47 PDT
X-Mailer: YahooMailWebService/0.8.121.416
Message-ID: <1347649967.45967.androidMobile at web182206.mail.bf1.yahoo.com>
Date: Fri, 14 Sep 2012 12:12:47 -0700 (PDT)
From: Dan <kc5gxl at sbcglobal.net>
To: "cw at mailman.qth.net" <cw at mailman.qth.net>,
	"476323589047432 at groups.facebook.com"
	<476323589047432 at groups.facebook.com>,
	"BaylorMax at aol.com" <BaylorMax at aol.com>,
	"RIsaac9056 at aol.com" <RIsaac9056 at aol.com>,
	"mr_cummings at sbcglobal.net" <mr_cummings at sbcglobal.net>


Note the multiple addressees also the Message-ID:
androidMobile at web182206.mail.bfi.yahoo.com


Do you have an android ?


DR

David J. Ring, Jr., N1EA <http://www.qsl.net/n1ea/>  Radio-Officers
Group<http://groups.google.com/group/radio-officers?hl=en>-- Join
CW email list <http://mailman.qth.net/mailman/listinfo/cw%20> -- Historic
Morse Recordings <http://archive.org/search.php?query=n1ea>
*Gopher Hole:*  gopher://sdf.org/1/users/djringjr/ (native or with
Firefox's Overbite extension) or via http to gopher
gateway<http://gopher.floodgap.com/gopher/gw?gopher://sdf.org/1/users/djringjr/>
*C**hat* Skype: djringjr MSN: djringjr at msn.com AIM: N1EA icq: 27380609

=30=



On Fri, Sep 14, 2012 at 11:21 PM, N9GXA, Paul <n9gxa.paul at gmail.com> wrote:

> Dan,
>
>   While I haven't seen any of these messages from you, I have to wonder if
> you didn't get hacked at all, but someone is sending spam from their
> computer, but just place your address as the sender just to through us off.
>
>   You may have sent a message to someone who forwarded that message
> without "cleaning up" the message before sending. If this happens enough
> times, someone else receiving a message with your address (and many others)
> listed within the body of the message could have been compromised and sent
> from there. A look at the header may give a clue as to where someone was
> when they sent it.
>
>   Just some thoughts...
>
> 73 - Paul - N9GXA
> Ubuntu here, too.
>
>
> On Fri, Sep 14, 2012 at 8:46 PM, Dan <kc5gxl at sbcglobal.net> wrote:
>
>> Hello all;
>>
>> I have apparently been hacked. I am baffled as to how so many addresses
>> have been sent spam from me. I don't use an address book, and don't save
>> contacts.
>>
>> Please don't open any attachments sent by me. If I send any attachments,
>> it will be stated in the subject header, and I will have some verbiage
>> about what teh link is for and where it goes to.
>>
>> Moderators, if you can, please put me on moderated status until I can get
>> this corrected.
>>
>> I am very sorry all,
>>
>> Dan Harriman  ARS  KC5GXL
>>
>> If at first you don't succeed, maybe you shouldn't try sky diving!
>>
>>
>> ______________________________________________________________
>> CW mailing list
>> Home: http://mailman.qth.net/mailman/listinfo/cw
>> Help: http://mailman.qth.net/mmfaq.htm
>> Post: mailto:CW at mailman.qth.net
>> CW List ARCHIVES: http://mailman.qth.net/pipermail/cw/
>>
>> This list hosted by: http://www.qsl.net
>> Please help support this email list: http://www.qsl.net/donate.html
>>
>> =30=
>>
>
>
> ______________________________________________________________
> CW mailing list
> Home: http://mailman.qth.net/mailman/listinfo/cw
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:CW at mailman.qth.net
> CW List ARCHIVES: http://mailman.qth.net/pipermail/cw/
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
>
> =30=
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.qth.net/pipermail/cw/attachments/20120914/21fd3b63/attachment-0001.html