[CW] Phishing/Spam

- pa0wv at amsat.org
Sat Aug 5 12:35:24 EDT 2017


Fabian Kurz schreef op 2017-08-05 17:53:
> On Sat, Aug 05, 2017 at 11:39:12AM -0400, D.J.J. Ring, Jr. wrote:

> No worries, this doesn't look like a security breach / hack.
> 
> Anyone can simply look up the list owners at the publicly available
> list info (http://mailman.qth.net/mailman/listinfo/cw) and it's fair
> to assume that the owners of the group are allowed to post; therefore
> spammers use these addresses to send spam/phishing etc. to the list.

Tks explanation. That is really weak. When somebody sent  an email to 
cw at mailman.qth.net  and uses as sender a spoofed address of one of the 
subscribers, it will be distributed among all subsribers. All 
subscribers are hidden but not so the list owner(s).

73



More information about the CW mailing list