[81739] in North American Network Operators' Group
Re: ISP phishing
daemon@ATHENA.MIT.EDU (Mark Tombaugh)
Tue Jun 28 17:18:57 2005
From: Mark Tombaugh <mtombaugh@alliedcc.com>
To: nanog@merit.edu
Cc: Robert Boyle <robert@tellurian.com>
In-Reply-To: <6.2.1.2.2.20050623095147.0525cca0@mail.tellurian.com>
Date: Tue, 28 Jun 2005 17:17:20 -0400
Errors-To: owner-nanog@merit.edu
On Thu, 2005-06-23 at 09:54 -0400, Robert Boyle wrote:
> we enabled a global rule which blocks
> any email from accounts such as billing, root, postmaster, antivirus,
> abuse, security, etc. which don't originate from our management IP space
> where our people work. As a result, we have stopped these phishing scams
> for our users dead in their tracks.
You sound so sure about that... Am I missing something?
From: E-gold Safeharbor Department <up-accounts@e-gold.com>
Subject: Attention! Your account has been violated!
From: "SOUTHTRUST" <support_refnum_2416154@southtrust.com>
Subject: SouthTrust Bank: important account notification
From: SouthTrust Bank <supprefnum6236641648298@southtrust.com>
Subject: SouthTrust Bank: important account notification
From: Sky Bank <dindata786@skyfi.com>
Subject: Sky Informs You!
From: <Andybfboa@UsBank.com>
Subject: Anti Fraud Protection against online attacks, UsBank.com update
euwtf
From: acc-validity@ncua.gov
Subject: System maintenance: update your Federal Credit Union
Just curious..
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mark Tombaugh mtombaugh@alliedcc.com Allied Computer Corp
Research Triangle Park www.alliedcc.com tel:(919)598-8900
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
