We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [spam]

Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.

Filter by
Sorted by
Tagged with
37
votes
6answers
45k views

How do I safely inspect a suspicious email attachment?

I received a pretty blatantly spammy email to my Gmail account. Attached to the email is a supposed HTML file. My first hunch was that it was probably one of the following: A nasty executable file ...
1
vote
0answers
49 views

What are spammers trying to acheive who only provide the correct contact information in their spam? [closed]

I've recently received 2 spam SMS messages, claiming to be from 2 different organizations, but (obviously) not sent by them. However, all of the contact details in the SMS match the real details of ...
0
votes
1answer
89 views

Filtering Obfuscated Spam Emails In Exchange

So the past few weeks we have been trying to cut back on the amount of spam reaching our users in our organization. We have been successful in implementing hard filtering rules like if an email ...
6
votes
1answer
641 views

Protonmail cannot read my mail — but can detect if it is spam?

All is in the title really. How can protonmail detect spam if if cannot read mail content? It could be based on metadata. But then spam detection would probably not be very good. And what metadata ...
0
votes
1answer
110 views

Bizarre email sent from spam email address with contact details of someone I know and a friend of their's in it [closed]

Someone I know (call them Darren Smith) recently received a rather odd email. It was sent to their personal email address, emailaddresswithnonameinit@emailprovider.com. The "From" field had "Darren ...
3
votes
1answer
170 views

Would it be possible for me to become infected just by opening a Facebook message?

I received one of those obvious fake "is this you?" and some fake Youtube link on Facebook Messenger. I don't know what it redirected to as I didn't click it (I only hovered over it to see if it was a ...
0
votes
2answers
130 views

Do spammers use legitimate email marketing companies?

Every so often I will find myself on a mailing list that I know I didn't sign up for. This always gets me very cautious and I treat the junk mail as hostile spam - don't click, just delete and ignore. ...
1
vote
1answer
159 views

Why would a stranger offer to write content for a nonexistent blog?

I get emails like this all the time: Hello dear, I’m a long time reader. I’m writing to you because I’d love to contribute a guest post on your website. I’ve been brainstorming some topics that I ...
0
votes
2answers
51 views

Spam email sign ups from HeadlessChrome?

I built a landing page with a "sign up with your email to get notified" sort of thing. The button executes some AJAX and submits to a PHP file which sends an email to me. Now, I'm getting a bunch of ...
2
votes
1answer
95 views

What's the point of spam posts where the link is too small to be visible?

Recently, a forum I frequent has received multiple spam posts on its general discussion board (three in the space of ten days). They all look like legitimate posts at first, but buried inside each of ...
0
votes
1answer
152 views

Strange spam to my IG and email with my secret information

I got strange email recently telling that i have an affair and it listed my visited cities with my boyfriend last year. Also threaten to share my relationship with others. Something that bother me ...
2
votes
1answer
138 views

Malicious Google Drive Links

Curious about a new form of spam I've noticed in my inbox. Someone seems to be using my email address to fill-out forms on sites, so that I receive the bounce back message. In this message there is a ...
0
votes
1answer
65 views

Are spam invites on Google calendar dangerous? [duplicate]

I was recently "invited" to win a free phone on my Google calendar. At first I was concerned that my account was compromised, but i think anyone can send a calendar invite. Is it safe for me to ...
2
votes
2answers
295 views

YouTube channel gone crazy!

OK, I use youtube just for listening music and watching videos. I don't upload, and I don't comment. Sometimes I do like some videos/comments. But today I accessed my channel and I saw like 20 ...
0
votes
1answer
235 views

DMARC and SPF are setup for my non-www domain but doesn't work for www

My website is up and running on www.example.com and I am sending automated emails from my email address support@example.com. DMARC and SPF seem to setup accordingly: _dmarc : v=DMARC1;p=none;pct=100;...
93
votes
10answers
18k views

Unsubscribe safely

I have heard that is better to never click to any link in an email. Is it a bad idea to click to a unsubscribe link? What is the best way to unsubscribe to undesired mails?
0
votes
1answer
141 views

How are USSD messages used and who could send them?

Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree). There is a Wikipedia ...
0
votes
1answer
69 views

Phishing emails and securing set up from compromise?

I'm a one-man company and I'm getting a lot of phishing emails very similar to the emails from companies I use. Some of these companies and the emails we exchange are very unique. How would these ...
1
vote
1answer
135 views

Why do so many spam emails lately contain a lot of unicode characters?

I receive a lot of spam email (probably from recent breaches). A lot of them contain text that looks a lot like the below text: Why do they contain such weird characters? Is this part of an exploit? ...
3
votes
1answer
7k views

Is Mailbait still a threat?

Is Mailbait (or similar services) still a threat, was it ever a threat, and if so how can it be mitigated? Mailbait is that service that promises to fill up your email inbox by sending you a huge ...
1
vote
1answer
39 views

Rate limiting API with PBKDF2 challenge?

Assume I have a public API endpoint which I'd like to protect against abuse. I'd like to implement a solution that ensures that the client spends some computational time before allowing the request to ...
86
votes
4answers
13k views

Is using 'dot' and 'at' in email addresses in public text still useful?

When entering your email address publicly, a practice is to replace . with text dot and @ with text at. I assume that the reasoning is that this way automatic email-collector robots won't match your ...
2
votes
2answers
2k views

Failed to send emails that I never sent

Some months ago, I started to receive some emails from "Mail Delivery Subsystem" (mailer-daemon@googlemail.com). Despite this is "automatic" failure email, I thought these emails were spam, so I just ...
103
votes
10answers
10k views

Why is blog spam always written so badly?

Some spam messages fresh from my Wordpress filter: Asking questions are in fact pleasant thing if you are not understanding something totally, except this article gives good understanding yet. ...
-1
votes
1answer
31k views

Spam email sent to my contacts pretending to be me.

I just found out someone has been sending spam emails to my contacts. I first thought that my account was hacked, but the emails aren't coming from my account but from a weird email address (my name ...
0
votes
0answers
34 views

Public report/telemetry API

I want to implement a telemetry data sender into my electron app. The API which I want to connect to is public. So any crash reports or any other data from the user is sent to it. The problem is how ...
1
vote
0answers
39 views

Emails Bypassing Exchange Transportation Rules

So here is the situation, we are trying to filter out spam emails within our organizations Exchange 2010 mail server and for the most part we have been pretty successful. Except for a few emails. ...
6
votes
3answers
3k views

What is this Russian calendar reminder that popped up?

I woke up this morning and saw a calendar reminder that I definitely did not put there, written in Russian. It would be super helpful if anyone knows what the text means, but I figured opening the ...
-2
votes
1answer
136 views

Can someone text a photo to someone unsolicited? [closed]

I am being told that “all the new work phones for the security staff” are having issues with spam calls by my SO. I can buy that no problem, but this... He got a text message from a woman who said he ...
1
vote
1answer
45 views

Difference between local and central anti-spam

I'm attending a web security course whose slides, concerning techniques for protecting ourselves from spam, sometimes report the expressions "local anti-spam" (or "personal anti-spam") and "central ...
1
vote
1answer
40 views

Which benefits personal anti-spams bring w.r.t. e-mail provider's ones? [closed]

Assuming that an e-mail service provider is using an excellent anti-spam software, for what reason its users should employ a personal anti-spam?
0
votes
1answer
251 views

Why is my website getting spammed? [duplicate]

Does anyone recognize this type of spam? NAME: Bagas EMAIL: dq95zxm7l@gmail.com PHONE: JCBUIR6ulwtO COMMENTS: I must express apaotcipeirn to the writer for bailing me out of this particular ...
1
vote
1answer
552 views

Accidentally opened a .htm email attachment - Help!

Got an email from someone i knew (their account was hacked obvs) and had a swift.htm file attached. I clicked on it and it opened up a blank browser window. Then after reading some forums I decoded it ...
17
votes
5answers
4k views

Hashcash, is this really used?

I just heard about this term, is it really used? The concept does not seem new, is it used and/or implemented in current technologies?
4
votes
2answers
6k views

Where can I get a list of “bad” IP addresses that are likely to be used by attackers or spammers? [closed]

Is there an open source project or a list of "bad" IP addresses or ranges that are likely to be used by attackers or spammers? UPDATE: ideally I want it to be a service call so I can call it using ...
0
votes
2answers
104 views

ML approach to malicious attachments using email contents

Based on my understanding of the field, it seems like there is a lot of attention paid to spam filtering based on the contents and metadata of an email, and there is considerable attention paid to ...
4
votes
2answers
578 views

Using Noscript while opening links

I opened two emails. Supposedly one was from Zendesk (the other I did not realize was from another source. Attention was elsewhere). Anyhow, I clicked on the unsubscribe button. Normally, this a good ...
-1
votes
1answer
67 views

Finding location of malicious internal IP in Wide Area Network [closed]

Malicious Traffic detected from an internal IP in Wide Area Network (Network of multiple cities in a country). How to find the city of that IP address in Wide Area Network? There is no IP subnet by ...
0
votes
0answers
22 views

What is the point of spam bots that re-post messages on other forums? [duplicate]

I frequent a low-traffic internet forum that has been dealing with some seemingly innocent spam bots that re-post messages from other forums. This is an example of such a message. It was posted in a ...
3
votes
1answer
99 views

How is typing “name at example dot com” safer than “name@example.com”?

Say I want to type my email address in a forum...say, hank.chief123@gmail.com. Obviously, that's a bad idea since spam bots will likely find it. So, I would just "cleverly" type hank dot chief one two ...
2
votes
2answers
148 views

Website customer e-mail collection form getting spammed, why and what to do

I am the webmaster for my girlfriend's page where she advertises her services as an online tutor. The webpage has a simple PHP post form, using which the visitors can leave their e-mail addresses to ...
2
votes
4answers
108 views

How to stop people from spamming the account creation url on my website [duplicate]

let's say I have a website with an account creation form. How can I stop people from writing a program that automatically submits the form thousands of times, which would fill up my database with junk ...
1
vote
0answers
58 views

Reduce form spam without external dependencies or false positives

I'm working on a Java Spring with a team and have been facing form spam issues. We are seeing a large number of requests that use generated & falsified information (ie everyone's names are generic,...
1
vote
1answer
306 views

Prevent spammers from faking emails being sent from you to someone else or yourself?

I received the following email with the headers below. How are the spammers exploiting this method of tricking users that their account is hacked? How can one prevent spammers from doing this with ...
0
votes
0answers
84 views

Friend got a spam mail with my name and location, after a google drive invite

Right after I sent an invite to a shared drive folder to said friends email adress, she received a spam mail featuring my name (the name I got on google account and my location (city). How does this ...
3
votes
3answers
1k views

What is the point of spam mails containing nothing but random letters?

I recently started replying to spam (as proposed by James Veitch), logged into an old email account and noticed (much to my delight!) a couple of hundred spam mails. Oddly enough I stumbled upon an ...
1
vote
2answers
166 views

How can I use Message-ID in header to screen (filter) Emails?

Recently started receiving torrent of spam emails immediately after ISP (Charter-Spectrum) switched to an upgraded Email system. Five of my ISP email addresses getting the same spam every day. Some ...
0
votes
1answer
51 views

Gmail Contact List Safety

How can I know that my Gmail is spoofed or sending spams to other people I sent email to them before? I don't have clear signs of that especially my contact list is empty but I'm afraid this may ...
0
votes
1answer
212 views

Customer Email Hacked, Subject line “smtp-mail.outlook.com,587,<email>,<password>” [closed]

We've had someone break into our email mailbox - They have sent out spam to in an automated fashion. The only clues is that there is a sent email a few days before with a subject line of "smtp-mail....
2
votes
1answer
393 views

Email header red flag

I am to analyze email headers for spam/phishing attempts. What is the methodology I should follow by only looking at the header? I know that I have to look at the from field, return-path, received, ...