Re: 29 May 2019: Emotet malspam: 'Mykolab Ref Id: I32560' [Was: Re: Spamming of NANOG list members]

[Paul Ferguson <fergdawgster () mykolab com>]

> On May 29, 2019, at 9:14 AM, Niels Bakker <niels=nanog () bakker net> wrote:
>
> * fergdawgster () mykolab com (Paul Ferguson) [Wed 29 May 2019, 18:04 CEST]:
> > This is apparently (?) part of a wave of spoofed malspams impersonating messages with ‘weaponized' attachments sent 
> > to the NANOG (North American Network Operators Group) mailing list.
>
> They're not sent to the list, they're sent directly to posted who have previously posted to the list.  NANOG have no 
> way to stop these.
>
>
>       -- Niels.


Understood, but I figured folks might like to know what they might be dealing with.

Cheers,

- ferg


—
Paul Ferguson
Principal, Threat Intelligence
Gigamon
Seattle, Washington, USA

Attachment: signature.asc
Description: Message signed with OpenPGP