BLOG

First spam to Epsilon leaked address

This morning I received the first two spams to the address of mine that was compromised during the Epsilon compromise back in April. Actually, I received two of them. One was the “standard” Adobe phish email. The other was similar but referenced Limewire instead of Adobe.

Have you heard the big news? Limewire has shut down for good.

Want to know what other people are using as their alternative?

Find Out Here : http://www.phishingdomain.here.example.com

Our limewire alternative has been adopted by millions of limewire users around the globe.

Same great features, tons of files and it’s easy to use

Enjoy

Jimmy Choo
Limewire Insider

One of the very interesting things about this spam is that it came through an ESP. It looks like the customer of another ESP was compromised and their account used to send the spam.

Looks like the spam to the stolen Epsilon data has started.

3 comments

  1. Derek Harding says

    I’ve received a few now. So far they’ve all been sent to tagged addresses I gave to Chase. Many were sent via other compromised ESPs.

  2. laura says

    Chase seems to be the common thread here.

    Steve was notified of one of his addresses leaking and he’s not seen any spam to it. I suspect it’s a big enough group of addresses that the spammers are mailing them in chunks or importing them / cleaning them slowly.

  3. Pete Austin says

    Re: “One of the very interesting things about this spam is that it came through an ESP.”

    Obvious question, but do you have the full message headers? If no (for example if the email came via Exchange) you really can’t be sure it came from an ESP. Happy to help in the unlikely event that you need it.

Comment:

Your email address will not be published. Required fields are marked *

  • OTA joins the ISOC

    The Online Trust Alliance (OTA) announced today they were joining forces with the Internet Society (ISOC). Starting in May, they will operate as an initiative under the ISOC umbrella. “The Internet Society and OTA share the belief that trust is the key issue in defining the future value of the Internet,” said Internet Society President and CEO, Kathryn Brown. “Now is the right time for these two organizations to come together to help build user trust in the Internet. At a time when cyber-attacks and identity theft are on the rise, this partnership will help improve security and data privacy for users,” added Brown.No Comments


  • Friday blogging... or lack of it

    It seems the last few Friday's I've been lax on posting. Some of that is just by Friday I'm frantically trying to complete all my client deliverables before the weekend. The rest of it is by Friday I'm just tired. Today had the added complication of watching the Trumpcare debate and following how (and how soon) it would affect my company if it passed. That's been a bit distracting, along with the other stuff I posted about yesterday. I wish everyone a great weekend.1 Comment


  • Indictments in Yahoo data breach

    Today the US government unsealed an indictment against 2 Russian agents and 2 hackers for breaking into Yahoo's servers and stealing personal information. The information gathered during the hack was used to target government officials, security employees and private individuals. Email is so central to our online identity. Compromise an email account and you can get access to social media, and other accounts. Email is the key to the kingdom.No Comments


Archives