RE: [Simulavr-devel] best regards (fwd)

[Weddington, Eric]

> -----Original Message-----
> From: 
> address@hidden 
> [mailto:address@hidden
> u.org] On Behalf Of Joerg Wunsch
> Sent: Friday, November 07, 2008 7:54 AM
> To: address@hidden
> Subject: Re: [Simulavr-devel] best regards (fwd)
> 
> As Michael Hennebry wrote:
> 
> > To me, this looks like a poor attempt at phishing.
> 
> Sure, coming from a source address somewhere in Korea.  Eric
> was for sure well asleep by the time he was supposed to have
> sent that message...
> 
> Seems someone gathered a lot of addresses in the GNU/FSF area to
> launch a phishing attack.  I've got a couple of auto responses today
> that indicate "I" have sent similar mails to other parties.  There's
> not much information within the auto responses to allow me tracking
> the actual source, but all appear to have in common (also with that
> mail here) some Korean characters in the timestamp within the first
> "Received" header (likely to be a weekday or month name).
> 
> As that phishing attack was launched using email source addresses
> well-known to mailing lists like this one, it could bypass the simple
> "only subscribed members are allowed to send" verification.

I have had a flood of emails recently, with attachments, that are getting 
filtered at the corporate level (but I still have to go flush them). I've 
noticed that a lot of these emails are from "sender" addresses that are 
familiar from the GNU/FSF area, as Joerg pointed out.

Eric Weddington