Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spam]

Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.

1
vote
3answers
334 views

Is this a phishing email?

I've just received the strangest email: I don't understand why anyone would send an email like this. It doesn't look to be asking for credentials of any kind. Is this a scam which is designed for ...
0
votes
1answer
54 views

How are USSD messages used and who could send them?

Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree). There is a Wikipedia ...
2
votes
1answer
223 views

Is Mailbait still a threat?

Is Mailbait (or similar services) still a threat, was it ever a threat, and if so how can it be mitigated? Mailbait is that service that promises to fill up your email inbox by sending you a huge ...
2
votes
1answer
99 views

Why do they use misspelled names in spams?

I sometimes open my spam folder. Recently I discovered a spam, the sender name was somebody I know, but one letter in her name was changed from 'i' to 't'. Today I received a spam with this name again,...
3
votes
1answer
105 views

Spam link returns empty redirect to google.com - am I missing something?

In this question someone received what was clearly a spam link. Sometimes I'm curious enough to take a peek, which I usually do with curl or other command line tools (less risk of drive-by malware, ...
0
votes
0answers
17 views

Zenmap -pf output

We smart host all our mail via a third party that archives and sanitises all our inbound and outbound mail. We recently had a spam attack, where the web portal to a users mailbox on this 3rd party ...
0
votes
1answer
67 views

Spam identification

We have a spamfilter running that does a very good job at tackling common spammer issues. From what it catches, I'm assuming it blocks mails based on a few things: SPF checks Certain attachment ...
15
votes
2answers
3k views

How did this email list a fake recipient? [duplicate]

My friend recently received a suspicious email for an iTunes gift card purchase from "Apple Store" with a header that displayed a fake "To:" address for orders@apple-store.com. Unsurprisingly, this ...
3
votes
1answer
57 views

Call and Unsolicited One Time Passwords

Context: I got a call from a US phone number from a guy claiming he was from a dark web website (something .onion, I can't remember) and he was calling regarding my "fake passport application". I ...
4
votes
1answer
215 views

Protonmail cannot read my mail — but can detect if it is spam?

All is in the title really. How can protonmail detect spam if if cannot read mail content? It could be based on metadata. But then spam detection would probably not be very good. And what metadata ...
2
votes
2answers
66 views

Can ISPs be helpful in preventing spam?

I have received a number of phishing emails from various domains. I would like to prevent the domain from sending emails so that other people also don't get taken advantage of. I have not been ...
5
votes
2answers
222 views

“Security through obscurity” is bad for security systems but good for spam detection. Why?

I was reading a request on meta Stack Exchange: A request for an informative popup before possible serial voting. It received two seemingly well-informed answers from well-informed users, and I've ...
0
votes
0answers
931 views

How to handle a Google security warning to a non Google email address?

I just received two emails from Google. The first one tells me that my password was changed, the second one tells me, that a windows device logged in to my account. All the links in the emails point ...
1
vote
1answer
65 views

What are solutions to combat spam bots beyond captcha? [duplicate]

I used to believe that captcha-like solutions are the websites' primary way to combat spambots. I used to believe that any site that doesn't implement such solution is likely to be flooded by shady ...
1
vote
2answers
118 views

How can I protect the signup form in my website? Is special spam prevention needed?

I'm struggling to write a secure sign-up form for my website. (My site is some kind of an image gallery. I have knowledge in html, javascript, msql and php) I know there is a tactic to secure login ...
139
votes
2answers
26k views

Received a set of SMS/MMS containing 2 photos, a voice message, and a text “I need help” with Google Maps link from a known contact. Is it spam?

My girlfriend (let's call her Jane) just got a set of SMS or MMS messages coming from a friend of her (let's call her Hellen). These messages contain: Two photos of Hellen A voice message A text that ...
0
votes
1answer
92 views

How to tell ordinary spam from some abusing my mail?

From time to time I glance through my spam folder to gauge how the filters are working, and if they're catching any "ham." Most of the spam is really obvious, but I'm getting a few which made me ...
2
votes
0answers
98 views

“Reply T to unsubscribe” in SMS spam messages, ignore or reply “T”? [duplicate]

I'm in China and I occasionally get spam SMS messages. Most of them ends in a sentence that says this or something else alike. Reply T to unsubscribe. (T is the leading letter in Chinese word "...
0
votes
0answers
67 views

Are these HTTP_REFERER from a bot-net? Are they harmful? How should I handle them?

We are getting a huge amount of requests that I can not explain. These request all go to admin.OURWEBSITE.com/api/analyze/, but we do not have an admin subdomain and we do not have an api/analyze ...
0
votes
2answers
130 views

Investigate email address leak source

I receive SPAM to my private Gmail email address which have never been publicly available and is not googlable at all. How could I receive SPAM on it? I saw this question, but in my case BCC is not ...
0
votes
1answer
81 views

DMARC and SPF are setup for my non-www domain but doesn't work for www

My website is up and running on www.example.com and I am sending automated emails from my email address support@example.com. DMARC and SPF seem to setup accordingly: _dmarc : v=DMARC1;p=none;pct=100;...
1
vote
2answers
219 views

Spoofed digitally signed email

So I received an email from "paypal.com" yesterday (and looks like most people did too(1)) and I've verified the ascii letters are indeed what they appear as (No capital I instead of L in paypal.com ...
1
vote
3answers
91 views

Why isn't email filtered when using contact form

When I send a non-gmail email to someone (company email) for the first time, there's a chance it will get filtered into the ether, never to be heard from again. However, if I use their website's ...
1
vote
2answers
84 views

Blocking Business Email Compromise (BEC) emails

I am recieving phishing emails like the one depicted below, with the sender being a legit member of our organization. How can I block this kind of email? What should be done? Is malwarebytes capable ...
0
votes
1answer
64 views

Avoiding redirects

I'm working on a site where users can input URLs. The URLs should point to sites where you can buy an item (for birthday/special event/...) It also sends out mails to e-mail addresses the user ...
0
votes
0answers
32 views

Info from “Message Recall” in Outlook

What kind of information can we get from a Message Recall in Outlook, e.g a spammer/phisher recalls an email sent to another email id. Is it an alternative to read receipts? Is it a check that these ...
1
vote
1answer
210 views

E-mail forensics for dummies

Long story short, I am getting Dutch language spam from a group; it has been going on for years, and they send several of them daily. They got my e-mail when I lived in the Netherlands and imagine ...
55
votes
4answers
14k views

How did I get this email without a “To” field?

I got an empty email in my language (Hebrew) with only a title that can be translated to I am still waiting for your feedback (original: עדיין מחכה למשוב שלך) Since my gmail handle multiple accounts (...
1
vote
3answers
253 views

Is this PayPal e-mail a scam? [closed]

I just received this e-mail (where the blacked out parts are my e-mail address): To me it looks like a scam for the following reasons: First of all, I do not have a Paypal account. It is written in ...
0
votes
1answer
27 views

Do snowshoe and hailstorm spammers use auto-generated domain names? [closed]

My question is about snowshoe and hailstorm spam emails. Do snowshoe and hailstorm spammers use auto-generated domain names?
5
votes
3answers
1k views

Why does Outlook not block spam sent by employees?

Our organization uses Outlook as email service and hence have our organization email domain. If someone from the organization sends a spam or phishing email to someone else in our organization, its ...
0
votes
1answer
30 views

Are emails from the Necurs bot net DKIM and/or SPF signed?

As the questions title already asks: Are emails sent by Necurs DKIM and/or SPF signed? Or are they unsigned and simply spoofed?
3
votes
1answer
92 views

Retail shop got my email address and sent me ads based on my activities [closed]

I visited Germany this weekend and I didn't provide my email address to anyone or to any website while I was there, neither to any service related to my visit there. I never connected to public Wi-Fi ...
0
votes
0answers
70 views

What are the security considerations when connecting to public rooms from my Matrix homeserver?

I have configured my own Matrix homeserver (running Synapse) to allow local accounts to chat in local rooms. I would now like to use my homeserver account @hello:example.com to connect to public rooms,...
0
votes
1answer
78 views

How to prevent spam message sending to my Android web services [duplicate]

I have an Android app that allow user to post comment. However this mean spammer are able to reverse engineer the services API and create a bot to post spam message automatically. My research ...
0
votes
1answer
4k views

Unknown proxy blocking connections over port 8080

For the past two weeks, I wasn't able to use some of the software installed on my computer (e.g. Visual Studio). There is a process that is communicating with IP address 185.82.212.95 over port 8080. ...
2
votes
1answer
166 views

Why set up DMARC for SPF if it's already set up for DKIM?

I have SPF and DKIM. I'm planning on adding DMARC to tell receivers to expect SPF and/or DKIM. I've read that it's best to set DMARC up with both SPF and DKIM, but I don't understand exactly when ...
2
votes
1answer
85 views

What should I do if I want to unsubscribe from what might be spam?

I've been getting emails at my work address for the past year from a company I don't remember subscribing to (especially not with my work email address). I've reported it as spam, but got a reply from ...
1
vote
2answers
163 views

Why do spammers send to random addresses in my domain?

My mail server is set up so that every email to the domain comes to me. One can email whatever_they_want@mydomain.com, and it will forward to me. I often get spam to strange address. Let's say, ...
5
votes
1answer
1k views

is it safe to use archive.is (webpage capture) to open a potential malware domain?

When I see potential malware posting in a forum or mail, I am sometimes curious what's the content. In this cases I open the URI with archive.is and then see the ad/SPAM. Is this procedure safe for a ...
1
vote
1answer
7k views

Suspicious text received from my # but I did not send it - is there definitely a virus involved, and if so who has it, the sender or receiver?

A close friend texted me this morning asking if I meant to send that last text, noting it was suspicious. I asked for a screenshot of the text in question, and it is a text from my number with spam I ...
2
votes
2answers
60 views

Can any information leak by sending auto-generated 'Unsubscribe me' email?

I have been receiving spams from one source for a few months. I believe it has a lot of channels - I see the from address like CREDIT CARDS<abc@somespam.com>, HOLIDAYS<abc@somespam.com>, ...
0
votes
0answers
54 views

How does Google identify Phishing emails? [duplicate]

Is there any paper or other resources which tell how Google identifies Phishing emails? The post What tools does the Google safe browsing service rely on? is regarding Phishing Websites / Pages. I'm ...
7
votes
1answer
295 views

Is this file malicious and how is it being transfered via youtube?

Today on my blog a spam comment appeared. I noticed a Youtube link being in the spam comment, which I found to be rather odd as no other link was distributed. I opened the link in a sandbox ...
0
votes
1answer
290 views

eM Client auto-downloads avatars for e-mail senders, including spammers. Can this be used against me?

After a recent upgrade, eM Client started showing me avatars for e-mail senders (including senders of spam messages). On their blog eM says: eM Client now automatically downloads and displays ...
2
votes
1answer
60 views

Spam email with my address details

I have registered domain under .xyz 123reg domain registration company. Recently I got an email from ummed.org company informing me that my SEO engine will be going to expire soon and I need to make ...
14
votes
5answers
6k views

I receive spam despite a captcha, has my wordpress blog been hacked?

I have a wordpress blog under my own domain. It does not have special security. For the past 1 week, my blog got spammed by someone from Russia - I think the contents of my blog somehow angered him. ...
3
votes
3answers
538 views

Receiving lots of spam after registering a new domain on GoDaddy

A couple of days ago I have registered a new domain on GoDaddy without WHOIS privacy option. The next day after registration I have started receiving spam in my mailbox as well as on my phone. The ...
0
votes
1answer
140 views

Are there domains available to security companies for testing spam? [closed]

Apologies if this is a stupid question, I'm not very experienced in this particular area. I work for a large corporation who has, in my mind, a rather paranoid view of security (developers had ...
2
votes
1answer
206 views

Email header red flag

I am to analyze email headers for spam/phishing attempts. What is the methodology I should follow by only looking at the header? I know that I have to look at the from field, return-path, received, ...