PaulDotCom mailing list archives

Re: Steady stream of probe email messages.


From: Aaron Melton <aaron () aaronmelton com>
Date: Sat, 21 Jul 2012 13:57:24 -0400

David,

Are these messages in plain text or HTML format?

Could they be imbedding objects in the HTML to do reconnaissance of the
system/network?

Aaron

On 7/20/12 7:29 PM, David Kovar wrote:
Good evening,

A mid-sized high tech client got a new CEO a few months ago. Since coming on board, he's received a steady stream of 
probe email addresses from a wide variety of throw away email address. The addresses are most often Gmail accounts 
with random letters for the name and for the address. The subject line and message body are often blank, but they 
occasionally contain "Hello". There is no malicious payload. No other messages arrive from the same address to any 
employee and the sender's address doesn't show up via any searches I've conducted.

Any speculation on the purpose of these messages?
Any ideas on how to trace them back to someone?
Any ideas on how to stop them?
Anyone else seeing this?

-David
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


-- 
"In the beginning of a change, the patriot is a scarce man, brave, hated
and scorned. When his cause succeeds however, the timid join him, for
then it costs nothing to be a patriot." -Mark Twain
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


Current thread: