Paul L. Snyder on 2 Jul 2008 10:25:41 -0700

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] New, sophisticated spam approach

Not sure if this is actually new, but it's the first time I've seen it.

In the past 24 hours, I've had three messages slip past my filters
that look very much like legitimate messages.  They are grammatical and
properly spelled (if short) polymorphs on a particular theme: add this
account to your mailing list.

The account the messages are being sent to is one that owns several lists
on Google Groups, so I'd suspect that's where they harvested it.
Interestingly, all those lists are private and unlisted, so they may
have been ennumerated by some other mechanism.

All the messages contain lots of "personal information" about the "sender"
(including a putative full name, phone, and fax number).  There is no
actual commercial content in the message...presumably, that will follow
if the account is actually added to a list.  Curiously, all the addresses
generated are in Louisville, KY.

Anyone else been seeing these?  (Two specimens included below.)


----- Forwarded message from Kelly Sutkamp <[redacted]> -----
From: Kelly Sutkamp <[redacted]>
Subject: email membership list
To: [redacted]
Date: Wed, 02 Jul 2008 11:49:26 -0400
X-Mailer: Sun Java(tm) System Messenger Express 6.3-5.02 (built Oct 12 2007;

I am writing to give my email address:

Kelly Sutkamp
4427 Greenbriar Road
Louisville, KY 40207

P.S.  The mail was sent to Michael Sutkamp (my soon to be former
husband), and he doesn't live here any more, so I am the one at
this address if you can update that.  Thanks....
----- End forwarded message -----

----- Forwarded message from "James R. Voyles" <> -----
From: "James R. Voyles" <<redacted>>
Subject: Mailing List
To: <redacted>
X-Mailer: YahooMailWebService/0.7.199
Date: Tue, 1 Jul 2008 14:23:47 -0700 (PDT)
Reply-To: <redacted>

Please add me to your mailing list.  Thank you.

This communication  (including any attachments) may contain privileged or confidential  information intended for a specific individual and purpose,and is  protected by law. If you are not the intended recipient, you should  delete this communication and/or shred the materials and any  attachments and are hereby notified that any disclosure, copying, or  distribution of this communication, or the taking of any action based  on it, is strictly prohibited.

 James R. Voyles, Attorney 6006  Brownsboro Park Blvd., Suite C/Louisville, KY 40207-1296  502-736-0556/FAX: 502-736-0558
----- End forwarded message -----
Philadelphia Linux Users Group         --
Announcements -
General Discussion  --