Educause Security Discussion mailing list archives

Hex Address in emails


From: Blake Brown <Blake.Brown () MHCC EDU>
Date: Mon, 21 Sep 2020 17:10:05 +0000

Anyone come across this one yet in your systems and if so how are you detecting/blocking if so? A regex?

https://www.zdnet.com/article/spammers-use-hexadecimal-ip-addresses-to-evade-detection/
[https://zdnet1.cbsistatic.com/hub/i/r/2015/07/17/8bf7fdb5-485e-4b4e-9c3b-7e9564c8d2eb/thumbnail/770x578/5f58f0ae29243337b643315d1df9898a/spam-email.jpg]<https://www.zdnet.com/article/spammers-use-hexadecimal-ip-addresses-to-evade-detection/>
Spammers use hexadecimal IP addresses to evade detection | 
ZDNet<https://www.zdnet.com/article/spammers-use-hexadecimal-ip-addresses-to-evade-detection/>
A spam group has picked up a pretty clever trick that has allowed it to bypass email filters and security systems and 
land in more inboxes than usual.
www.zdnet.com



Thanks,
Blake Brown
Infrastructure Manager

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: