[SFDXA] CAREFUL: SPAM AND MALWARE targeting SFDXA list

[Bill Dzurilla]

Alan,

I received the same spam message from "you" and "Norm" about an hour apart, and the same message was posted to the SFDXA list, from both of "you".  Probably the spammer's program found the SFDXA list archive (which is available to anyone via the web), harvested the addresses of folks who had posted to the list, and then sent the spam to every address harvested, randomly choosing you and Norm as the "senders".

However, if the spam was sent to people on your contact list who are not on the SFDXA list, then my theory is wrong and your account may have been compromised.  If so, I would do more than just change the password, I'd have the entire computer checked for malware.  Your friend who saw the spam in his outbox definitely was compromised.

And anyone who clicked on a link in the spam emails should have their computers checked, as it may have installed malware.

73, Bill NZ5N  





>________________________________
> From: Alan Maslin <amaslin at msn.com>
>To: "Bill Dzurilla, NZ5N" <billdz.geo at yahoo.com>; npalex at aol.com; SFDXA List <sfdxa at mailman.qth.net> 
>Sent: Thursday, December 20, 2012 11:31 AM
>Subject: RE: [SFDXA] CAREFUL: SPAM AND MALWARE targeting SFDXA list
> 
>
> 
>Bill, you would be correct except for the fact that not only did they find my email address they apparently also got into my contact list as those are the folks who received the bogus emails. As far as I know the only way for someone to get your contact list is to actually get into your email account. So, changing passwords could help in that situation.  I have also heard that several other people have had the same problem and they're not all the exactly the same. For example, in my case, my "sent" folder was just as normal as it always was so the emails that purported to come from me didn't come from my account. However, Steve WA2EAJ reports that his "sent" folder was full of indications that his bogus emails did come from his account.  It also seems as though not everyone on my contact list received a message. Only a handful did and I can't see a common thread between any of them.  So, it still may not be a "hacking" but at least we could call is
 a "compromising" of the email account.
> 
>73,
> 
>Al, N3EA
> 
>
> 
>
>
>________________________________
> Date: Wed, 19 Dec 2012 21:31:11 -0800
>From: billdz.geo at yahoo.com
>Subject: Re: [SFDXA] CAREFUL: SPAM AND MALWARE targeting SFDXA list
>To: amaslin at msn.com; npalex at aol.com; sfdxa at mailman.qth.net
>
>
>Guys, as mentioned before, this is not a "hacking" and changing your password probably will not help.  I'm not a techie but, as explained to me, the bad guys are not sending the spam from your email.  They found your email address and have the means to send email that looks like it came from you.  They are not looking for replies, they are trying to trick recipients into clicking the link.
>
>See: http://ask-leo.com/how_do_spammers_send_email_that_looks_like_it_comes_from_me.html
>
>May may say this is extreme, but the safest bet is to never click on a link in an email.
>
>73, Bill NZ5N 
>
>
>
>
>
>
>>________________________________
>> From: Alan Maslin <amaslin at msn.com>
>>To: npalex at aol.com; SFDXA List <sfdxa at mailman.qth.net> 
>>Sent: Thursday, December 20, 2012 12:09 AM
>>Subject: Re: [SFDXA] CAREFUL: SPAM AND MALWARE targeting SFDXA list
>>
>>
>>
>>
>>
>>Hi all,
>>
>>Looks like I was hacked, too, although my "sent" box looks normal. I have received a number of emails from friendswho say they've received weird emails from me tonight.  My "inbox" had a lot of weird messages all saying they wereundeliverable.  I have changed my password, etc. for my email account so I hope it's will stop.  Sure don't know whereit came from.  Also, I received an email from Steve Ikler, WA2EAJ saying that his email had been hacked tonight, too. 73, Al, N3EA
>>
>>> To: k.siwiak at ieee.org; sfdxa at mailman.qth.net
>>> From: npalex at aol.com
>>> Date: Thu, 20 Dec 2012 00:02:02 -0500
>>> Subject: Re: [SFDXA] CAREFUL: SPAM AND MALWARE targeting SFDXA list
>>> 
>>> To the group'
>>> 
>>> I was hacked and emails with HEY in the subject - do not open
>>> 
>>> Norm
>>>  
>>> 
>>>  
>>> 
>>> 
>>>  
>>> ______________________________________________________________
>>> South Florida DX Assoc.
>>> SFDXA WebSite: http://qsl.net/k4fk
>>> SFDXA Repeater 147.33+ 103.5 Tone
>>> To Post: mailto:SFDXA at mailman.qth.net
>>> Subscribe or UNSubScribe:
>>> http://mailman.qth.net/mailman/listinfo/sfdxa
>>> DX Net Wed 7:33 PM Repeater
>>> 
>>> This list hosted by: http://www.qsl.net
>>> Please help support this email list: http://www.qsl.net/donate.html
>>
>>                        
>>______________________________________________________________
>>South Florida DX Assoc.
>>SFDXA WebSite: http://qsl.net/k4fk
>>SFDXA Repeater 147.33+ 103.5 Tone
>>To Post: mailto:SFDXA at mailman.qth.net
>>Subscribe or UNSubScribe:
>>http://mailman.qth.net/mailman/listinfo/sfdxa
>>DX Net Wed 7:33 PM Repeater
>>
>>This list hosted by: http://www.qsl.net
>>Please help support this email list: http://www.qsl.net/donate.html
>>
>>
>>
>
>