[RFI] (no subject)

[Hare, Ed W1RFI]

For most of us, our email addresses are public anyway.   If you all google your email address, most of you will find it.

They can get email addresses by buying them, by searching for them or even by making them up.   It appears that some spammers have figured out ham-radio call signs, so they make up callsign at major-isp.com, such as w1rfi at aol.com, and at least some of them are real.  They they simply pretend to be you.

There are also virii that will harvest someone's address book.  The premise is that many people have friends in common, so if they send out spoof email from people in someone's address book to others in that address book, they may know each other. So, when you all get an email from w1rfi at arrl.org, you might well open it. 

Now, when they get really sneaky, they will start harvesting subjects and then send them out with a Re: (subject), and a response that says, "I have been reading this thread, and think that this is something useful:

www.malwaresitethatdoesnastythings.com

I get email from me all the time, telling me to look at the pretty pictures.

Ed


________________________________________
From: RFI [rfi-bounces at contesting.com] on behalf of Kimberly Elmore [cw_de_n5op at sbcglobal.net]
Sent: Tuesday, June 05, 2018 4:22 PM
To: Clay Autery; rfi at contesting.com
Subject: Re: [RFI] (no subject)

Yes, this is spam and it's quite irritatting, but before anyone else gets too upset, this is most certainly coming from a *spoofed* email address. There's a pretty good explanation about how spammers pull this off at https://lifehacker.com/how-spammers-spoof-your-email-address-and-how-to-prote-1579478914 if you want to know. Yes there are ads, but this is a good introduction. No, I have no association with the web site.

Very seldom is someone's e-mail *account* ever "hijacked" or "stolen." Lists of (at one time) legitimate, active email addresses are for sale all over the web. These are often harvested from web mai clients, such as browsers. If someone is reading their mail in a browser and simply closes the browser, instead of explicitly logging off, a prt can be left open that exposes your address list to the outsode. The port may not stay open long, but it doesn't take long if a web crawler spots it.
Kim N5OP

      From: Clay Autery <KY5G at montac.com>
 To: rfi at contesting.com
 Sent: Tuesday, June 5, 2018 2:11 PM
 Subject: Re: [RFI] (no subject)

SPAM!!!

______________________
Clay Autery, KY5G
(318) 518-1389

On 06/05/18 05:55, Jack Hammett via RFI wrote:
> http://moreover.tiempoacrilico.com
>
> Jack Hammett
>
>
> _______________________________________________
> RFI mailing list
> RFI at contesting.com
> http://lists.contesting.com/mailman/listinfo/rfi

_______________________________________________
RFI mailing list
RFI at contesting.com
http://lists.contesting.com/mailman/listinfo/rfi



_______________________________________________
RFI mailing list
RFI at contesting.com
http://lists.contesting.com/mailman/listinfo/rfi