[geeks] Spammity spam, wonderful spam

[Grant Taylor]

On 1/26/22 11:13 AM, Phil Stracchino wrote:
> Anyone else getting LOTS of spam with your own post topics sent back to
> you from Joe Blow in Blowsville dot somerandomdomain with a Form.xls
> appointment?

I'm getting spam with Excel / .xls attachments.  My virus scanner says
that they are Emotet.

> I don't know whether this is "someone's account has been compromised" or
> "some richard somewhere is scraping an archive for addresses and post
> titles".

I've seen different source addresses.  I suspect it's someone scraping.
Maybe a subscriber that's infected.  I didn't see any consistent
pattern.  I did see references to CWP in the majority of the samples
that I've gotten.



--
Grant. . . .
unix || die

[demime 1.01d removed an attachment of type application/pkcs7-signature which had a name of smime.p7s]