[sdiy] WARNING: Potential Adressgrabbing at dropmix.xs4all.nl

[Mason]

Hi,
or, potentially, spammers see people who have posted to the s-diy list
and send them emails echoing the mail list software's setup in the
hopes (correct!) that you would click their links and visit their
sites. What do the headers say about the origin of the email? I would
think any daemon-generated messages would have origin of localhost.
--Mason


On 7/2/07, Florian Anwander <Florian.Anwander at consol.de> wrote:
> Hi
>
> > You
> > can turn off the option to receive these reminder emails.
> Thats not the problem. But how does it come, that I am subbed to a
> appearent spammer maillist. I will ask my sysops to trace whether I
> receive spam from this list; if yes, then for me its becomes more and
> more quite evident, that xs4all has been hacked/misconfigured or - even
> worse - does sell adresses.
>
> Florian
>
> >
> > Seb
> >
> >
> > Florian Anwander wrote:
> >
> >> Hi
> >>
> >> I don't know whether you also got a mail which begins like "This is a
> >> reminder, sent out once a month, about your dropmix.xs4all.nl mailing
> >> list memberships."
> >>
> >> I also got such a mail about a list, I definitely never suscribed to
> >> (the list seems to be related to a website, which earns money with
> >> web-adds on a boring portal).  And also they suggest a password with
> >> which I should login for handling of my list account, which definitely
> >> do not fit into my principles of password selection.
> >>
> >> I definitely whink this one is some kind of datagrabbing, and I fear
> >> that the dropmix.xs4all.net-list server is involved (willing or not).
> >>
> >> Anyone else got mails like these (I blanked out the account and the
> >> password)?:
> >> ------------------------------------snip-------------------------------------
> >>
> >> This is a reminder, sent out once a month, about your
> >> summer-stream.com mailing list memberships.  It includes your
> >> subscription info and how to use it to change it or unsubscribe from a
> >> list.
> >>
> >> You can visit the URLs to change your membership status or
> >> configuration, including unsubscribing, setting digest-style delivery
> >> or disabling delivery altogether (e.g., for a vacation), and so on.
> >>
> >> In addition to the URL interfaces, you can also use email to make such
> >> changes.  For more info, send a message to the '-request' address of
> >> the list (for example, XXXXX-request at summer-stream.com) containing
> >> just the word 'help' in the message body, and an email message will be
> >> sent to you with instructions.
> >>
> >> If you have questions, problems, comments, etc, send them to
> >> XXXXX-owner at summer-stream.com.  Thanks!
> >>
> >> Passwords for florian.anwander at consol.de:
> >>
> >> List                                     Password // URL
> >> ----                                     --------
> >> XXXXX at summer-stream.com                  YYYYYYYY
> >> http://mail.summer-stream.com/mailman/options/XXXXX_summer-stream.com/florian.anwander%40consol.de
> >>
> >> ------------------------------------snip-------------------------------------
> >>
> >>
> >>
> >> Regards, Florian
> >> _______________________________________________
> >> Synth-diy mailing list
> >> Synth-diy at dropmix.xs4all.nl
> >> http://dropmix.xs4all.nl/mailman/listinfo/synth-diy
> >>
> >
>
> --
> Florian Anwander                  |ConSol
> Tel.   +49(89)45841-133           |Consulting&Solutions Software GmbH
> Fax    +49(89)45841-111           |Franziskanerstr. 38, D-81669 München
> email: florian.anwander at consol.de |http://www.consol.de
> _______________________________________________
> Synth-diy mailing list
> Synth-diy at dropmix.xs4all.nl
> http://dropmix.xs4all.nl/mailman/listinfo/synth-diy
>