Re: [Hampshire] Nasty email purporting to come from the US

Top Page

Reply to this message
Author: Brad Macpherson
Date:  
To: Hampshire LUG Discussion List
Subject: Re: [Hampshire] Nasty email purporting to come from the US
I get a couple of these each day - they started (for me) in November last year, all claiming to be from UK-based companies. It’s gradually shifted to US-based companies over time.

Cheers

Brad

> On 22 Apr 2016, at 09:54, Chris. Aubrey-Smith <cas194@???> wrote:
>
> I've seen a few like this. Some may be malicious, but some look as if they had simply been mis-directed. Obviously not for me: kill it.
>
> There seems to have been a general increase in spam e-mail from Murrkin sources, especially those offering to help with exploiting US-government housing and welfare schemes and the like.
>
> Whatever other faults it may have, I think gmail does a very good job of identifying correctly those items which belong in the spam bucket.
>
> Chris
>
>
> On 22 April 2016 at 00:28, Daniel Llewellyn <diddledan@??? <mailto:diddledan@gmail.com>> wrote:
>
> On 21/04/16 21:10, Ian Park wrote:
> > "Purchase Order, 11300 / 0002323808, has been Dispatched. Please detach
> > and print the attached Purchase Order."
> >
> > The attachment was a .tgz file containing a 6.2kB javascript file - a
> > method of attack which I haven't seen before. Needless to report that I
> > didn't attempt to run said javascript file! Has anyone else come across
> > this method of attack?
>
> Yes, I've seen many similar to these over the past month. They started
> sending sometime in february or march and my own spambox has been
> inundated with variations on the theme trying to catch-me-out and get me
> to open one of the malware-laden attachments.
>
> --
> Daniel Llewellyn | PGP/GnuPG Key ID: 0x0349ED21
> 4C9C BFAD 0069 D679 9660 BCD5 40C2 D958 0349 ED21
>
> --
> Please post to: Hampshire@??? <mailto:Hampshire@mailman.lug.org.uk>
> Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire <https://mailman.lug.org.uk/mailman/listinfo/hampshire>
> LUG URL: http://www.hantslug.org.uk <http://www.hantslug.org.uk/>
> --------------------------------------------------------------
>
> --
> Please post to: Hampshire@???
> Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire
> LUG URL: http://www.hantslug.org.uk
> --------------------------------------------------------------


--
Please post to: Hampshire@???
Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL: http://www.hantslug.org.uk
--------------------------------------------------------------