RE: malware warning

[Dennis Burgess <dmburgess () linktechs net>]

Yep, been getting SPAM from the list for quite a while now. ☹  Rather from someone harvesting from the list. 



Dennis Burgess, Mikrotik Certified Trainer
MTCNA, MTCRE, MTCWE, MTCTCE, MTCINE, MTCSE, HE IPv6 Sage, Cambium ePMP Certified 
Author of "Learn RouterOS- Second Edition” 
Link Technologies, Inc -- Mikrotik & WISP Support Services 
Office: 314-735-0270  Website: http://www.linktechs.net 
Need to Automate MikroTik Backups:  https://cloud.linktechs.net 
Create Wireless Coverage’s with www.towercoverage.com 

-----Original Message-----
From: NANOG <nanog-bounces+dmburgess=linktechs.net () nanog org> On Behalf Of Randy Bush
Sent: Tuesday, July 18, 2023 7:03 PM
To: North American Network Operators' Group <nanog () nanog org>
Subject: malware warning

malware email is so common i normally do not warn of it.  but, in this case, the attacker is extracting quotes from 
nanog and luring folk into clicking.  e.g.

From: takahashi () fukushitrust com
Subject: Re: jon postel
To: Randy Bush <randy () psg com>
Date: Mon, 17 Jul 2023 04:01:47 -0700

Hello! 

We would like to present to you several alternatives for presentations and find out your thoughts and opinions, please 
let us know whatever you think about it. 

https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdognibs.com%2f8jh%2fogr%2fg0h436ttqbw&umid=AD2D8C0B-00CB-C606-B620-46056820F8C9&auth=079c058f437b7c6303d36c6513e5e8848d0c5ac4-f36651c1d6f10141663aea6b1fe748c4448756cb
 

Waiting for your reply 
 
> Does anyone have any stories about working with or near John they > would like to share with the  list? It would 
> definitely make my day > to hear more about the early internet somewhere around i have a  protocol violation ticket 
> he issued. --- Who says that routing unallocated address space is ungood? --  Randy Bush Routing unallocated address 
> space is ungood! -- Jon Postel randy 

----

and

From: office () daimontrade com ua
Subject: Re: Reverse DNS for eyeballs?
To: Randy Bush <randy () psg com>
Date: Tue, 18 Jul 2023 02:56:36 -0700

Hello, 

Modified paperwork regarding For this month. Kindly read through it attentively. 

https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fsoocoop.net%2fe24%2f1s0%2f7ckl0icu7h&umid=AD2D8C0B-00CB-C606-B620-46056820F8C9&auth=079c058f437b7c6303d36c6513e5e8848d0c5ac4-d3bde3aae320235c42f1c7b28e3294c7ef572a81
 

We appreciate your attention. 
 
> I would say the absence of reverse DNS tells useful info to receiving > MTAs - to preferably not  accept. yep