Re: New SPAM DOS

[John Peach <john-nanog () johnpeach com>]

It's a phishing scam:

http://isc.sans.org/diary.html?storyid=7918&rss



On Fri, 8 Jan 2010 12:41:07 -0700
Blake Pfankuch <bpfankuch () cpgreeley com> wrote:

> I too have been receiving these to my spamtrap domain...  again any
> ideas to combat this would be helpful.
>
> -----Original Message-----
> From: Shane Ronan [mailto:sronan () fattoc com]
> Sent: Friday, January 08, 2010 12:34 PM
> To: Owen DeLong
> Cc: Nanog list
> Subject: Re: New SPAM DOS
>
> I recently started receiving these as well for my domain.
>
> Would appreciate anyone's input on what the deal is.
>
> On Jan 8, 2010, at 2:22 PM, Owen DeLong wrote:
>
> > At least this is new for me...
> >
> > I host scvrs.org on one of my servers, and, it does not have any
> > outlook or owa services.  For some reason, someone decided to try
> > and send this message out to various internet recipients:
> >
> > > Dear user of the scvrs.org mailing service!
> > >
> > > We are informing you that because of the security upgrade of the
> > > mailing service your mailbox (x) settings were changed. In order to
> > > apply the new set of settings click on the following link:
> > >
> > > http://scvrs.org/owa/service_directory/settings.php?email=x&from=
> > > scvrs.org&fromname=wa2ibm
> > >
> > > Best regards, scvrs.org Technical Support.
> >
> > An now I'm having to clean up various blacklistings thinking that my
> > server is a spamvertised web site.
> >
> > Anyone seen this before?  Any good techniques for combatting it?
> >
> > Owen


-- 
John