From owner-freebsd-questions@FreeBSD.ORG Sun Mar 20 19:53:35 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A71EC16A4CE for ; Sun, 20 Mar 2005 19:53:35 +0000 (GMT) Received: from dreadlock.phreakout.net (dreadlock.phreakout.net [208.51.56.115]) by mx1.FreeBSD.org (Postfix) with SMTP id 10DBB43D58 for ; Sun, 20 Mar 2005 19:53:35 +0000 (GMT) (envelope-from ababurko@adelphia.net) Received: (qmail 2163 invoked from network); 20 Mar 2005 20:02:25 -0000 Received: from 24-52-224-96.kntnny.adelphia.net (HELO ?192.168.1.101?) (24.52.224.96) by dreadlock.phreakout.net with SMTP; 20 Mar 2005 20:02:25 -0000 Message-ID: <423DD4A1.1020509@adelphia.net> Date: Sun, 20 Mar 2005 14:53:05 -0500 From: Bob Ababurko User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 Cc: freebsd-questions@freebsd.org References: <20050320172230.4141B16A4F2@hub.freebsd.org> <20050320134224.30F9.GERARD-SEIBERT@suscom.net> In-Reply-To: <20050320134224.30F9.GERARD-SEIBERT@suscom.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Ebay Phishing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2005 19:53:35 -0000 Gerard Seibert wrote: >On Sun, 20 Mar 2005 10:22:23 -0600 Chris wrote: >||> >||>Robert Slade wrote: >||>> Hi all, >||>> >||>> Is it just me, but I've had 2 Ebay Phishing e-mails to this e-mail >||>> address that I only use for this mail list. Both mails where from >||>> Comcast users !! >||>> >||>> Rob >||> >||>Sounds like someone from Comcast is on this list AND using a Windows box >||>AND is infected. >||> >||>Shame on you >||> >||>-- >||>Best regards, >||>Chris >||> >||>If you have always done it that way, it is probably wrong. > > >********** Reply Separator ********** >Sunday, March 20, 2005 1:35:28 PM > >1) Did you actually confirm that the email originated from Comcast >2) Did you report the email to Comcast as well as spoof@ebay.com >3) Why does it have to be a Windows box? Anyone can access this forum >and harvest email addresses. > >-- >Gerard Seibert >gerard-seibert@suscom.net > >They say that a dog is man's best friend. I do not believe that. How >many of your friends have you had neutered? > > It is most likely it is a windows box that has been copromised due to one of the slew of M$ vulnerabilities. Some crafty programmer has turned this box into a zombie and installed a mailing package or a proxy server and is sending mail from it in concert with thousands of others just like it...al behind one keyboard. -Bob