[Mimedefang] [OT?] Random Word Spam

Michael D. Sofka sofkam at rpi.edu
Mon Mar 12 11:56:12 EDT 2012


Richard Laager wrote:
> We've got a customer who is receiving 1 message per second! that
> consists solely of random English words stuck together (both subject and
> body). This has been happening for 24-36 hours.
> 
> As far as I can see, it's coming from hijacked accounts all over the
> place (hundreds or thousands of servers) with varying sender addresses.
> 
> Is anyone else seeing this sort of thing?
> 
> Any idea how I might combat this?
> 
> I'd love to bulk submit these messages and report them back to the
> admins of the compromised servers, if that might do some good.

We just had this happen again.  Same MO: ramdom subject and message 
body, no links or email addresses in the message, multiple incoming 
relays, various recipients, Message-Id starting with "CHILKAT-MID".

Three compromised accounts have been used to send this "spam" starting 
Sunday morning.  I'm using the Message-Id to trap new accounts. 
Coincidentally, we has a phish get through to a number of our users last 
weekend.

Mike

-- 
Michael D. Sofka               sofkam at rpi.edu
C&MT Sr. Systems Programmer,   Email, HPC, TeX, Epistemology
Rensselaer Polytechnic Institute, Troy, NY.  http://www.rpi.edu/~sofkam/



More information about the MIMEDefang mailing list