Today's #SpammerDuJour is Michigan Public (https://bsky.brid.gy/ap/did:plc:dmbcwcgxgwflkcidpbjzmnyc) mailing via MailChimp. Depending on which format I look at, the spam is either asking me to renew my membership (plaintext) OR it's just an intern saying "Hi" (HTML.)
Just wrote my 4th flame reply in 20 years & unsubbed for the 4th time. (1/2)
#spammerdujour — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #spammerdujour, aggregated by home.social.
-
-
Today’s #SpammerDuJour is claiming to be Carrissa Meiners -- [email protected]
“She” wants to sell me webinars (JFC, does ANYONE respond to this garbage???) by someone named Ray Evans on how to select “AI” chatbots for business. As if that were a thing I would be insane enough to want to learn.
Sent via Spam-For-Hire shop SparkPost. -
Today’s #SpammerDuJour is... someone hiding behind Google, trying to replay DKIM sigs, and not proofreading their DocuSign phish text.
Sent to an antique single-user address that had not seen traffic in 13 years.
Remarkably, they sent this twice to the same address ~8 hours apart. -
Happy to say that Apple properly dumped this in the Junk mailbox. I don't really see much mail of any sort there because I also don’t use the icloud.com address or anything that lands there for much of anything.
Also, enough people who got this that Pyzor and Razor and DCC all knew of it by the time I checked. Nice.
The entity supposedly behind this 'bsddemand.com' domain is BlackSky Digital, a UK entity apparently unrelated to the Bluesky alternative. -
Long time, no #SpammerDuJour...
Some{one,thing} claiming to be "Emma Hayes" sent this to an entirely invented email address in a domain whose MXs point to iCloud with a wildcard alias but which has never actually been used by anyone but myself for various test purposes. It is an address imputed from the names I use in social media.The LLM that wrote this seems to have read my website, missing points of nuance there which divert most human B2B spam...
-
Today’s #SpammerDuJour is someone claiming to be “Andrew Chambers” of AT&T Business with the address [email protected]. DKIM and SPF support that claim. Looks like AT&T does initials and 4 digits of... something
What's special about Andrew is that he apparently has purchased a list of email addresses which includes the unique one I gave to my current connection provider. He can only have acquired that address by criminal means.
I am doing what I can to ruin his day. Because I am like that.
-
Amazingly, when it rains, it pours. A second #SpammerDuJour claiming to be Darren Daugherty [email protected] trying to sell me services on my work account, an unpublished address I don't share except for support needs. I am NOT a sales contact, as I have no power to make spending decisions. Sent via Google, the B2B spammer's favorite platform.
Notable: he made a specific guess about our current services indicating either unforgivable chutzpah or unforgivable snooping.
-
Today's #SpammerDuJour is... someone...
Maybe someone named Marioli Samuel (strikes me as W. African) or maybe someone named "Dr. Rose James" who has a UK phone number. Both with GMail addresses, claiming to represent "European Investment Bank in Luxembourg and the IMF" It is, of course, a #419 scam promising a large payment.
Writing in Cyrillic script, so it is either Russian or Ukrainian. MacOS translate yields the same English whichever source language I tell it. No clue why.
-
Today's #SpammerDuJour is Christina Hines, the spammer running for the Democratic Party nomination in my Congressional district, #MI10.
This isn't #email #spam, but rather mobile messaging spam, sending out a full body shot and an appeal for money. This is the second such event for me from #MIDEMS and it is not a welcome one. I will be giving them absolutely no money this cycle.
-
Today's #SpammerDuJour is “Martijn Vroegindeweij <[email protected]>" who seems to believe that any address he can find connected with any FOSS belongs to a “Github Contributor" and that this somehow gives him a right to conduct a supposed PhD research project by randomly spamming addressess which are not actually associated with GitHub.
If I had the time, I’d spend some of it ruining his semester, maybe his whole career. He definitely isn't doctoral material.
-
Why would anyone send me this XML file with a “library-ms" extension? claiming it is an invoice?
I was not aware that Windows could even grok extensions that long...Is this a start of what is called a “sophisticated attack chain?"
Because it seems spectacularly lame and stupid to me. Not worthy of a #SpammerDuJour award...
-
Today's #SpammerDuJour is #Amazon. They sent me email about a real change in my account, so how am I calling this #spam?
The change is the addition of a vehicle to my account. The assertion in the mail that *I* added a vehicle to my account is absurd. I did no such thing & never would. Until receiving the spam, I had no idea that such linkage was possible. The vehicle linked to my account seems to be the car my wife leased from her employer 5 years ago. 3 cars ago. It never had my name on it.
-
Today's #SpammerDuJour : #Apple.
5 identical messages sent to my AppleID address without any mechanism to unsubscribe.
#IWeep6Colors -
Today's #SpammerDuJour: Frau Feyza Olcay Ýbrahim. Apparently she thinks that I'm a good Turko-German boy who'll do good things with 40% of my inheritance from her.
For some reason, this not-poor elderly lady with cancer had no way to contact me other than cracking a Brazilian government mail server. Odd, since the only contact is a Reply-To pointing to a domain whose mail is hosted by Zoho. I know they kinda suck, but surely not enough or a dying widow to engage in transnational cybercrime.
-
Today's #SpammerDuJour is supposedly Paul Wishall, Jr. Account Executive, Travis CI.
Paul sent #spam to me, using an address only given to GitHub, asserting the absurd fantasy that "It’s been a while since you last evaluated Travis CI."
I have no more "evaluated Travis CI" than I have test-flown a Tupolev Tu-444. Not "a while" ago, not today, not ever, unless something extremely unlikely occurs.
Goodbye, Paul. I will do what I can to assure that your future spam delivers poorly.
-
This is not quite a #SpammerDuJour but it is by far the most interesting unsolicited mail I've had in a while.
What is most interesting is that the entity which randomly gave me recovery powers over their email account isn't what it seems. The local part "loric.sorenson” looks like a name, doesn't it? As far as I can tell, no such person exists.
Go ahead, call me paranoid, but this is just weird.
-
Today’s #SpammerDuJour is a special one. A really sloppy #BEC attempt. Trying to hijack the pay of someone whose last pay was most of a decade ago. It didn't even try to fake any email address, it just slapped her name on a random compromised account.
-
I really don’t understand my (work) contact form spammers’ thinking.
We do not now nor have we ever had any facilities in Russia but even if we did, I doubt they'd be in Leninsky and using a septic tank, nor could we have been in such a facility for long enough to require pumping. -
Today’s #SpammerDuJour is putative lawyer with a Turkish-looking name.
Not notable for the “lost inheritance seeking an heir’ scam, but for its cosmopolitan nature.
It was sent to both my personal address AND my ASF contributor address, from an apparent Turk, in *Luxembourgish*Well done. Whatever AI came up with that as my native language is clearly ready to rule the world.
-
Today’s #SpammerDuJour is the operation that keeps using $dayjob's web contact form to advertise emigration to Costa Rica in Russian, explicitly targeting Russians.
We do have multinational ops. None in Russia or Costa Rica.
-
Today’s #SpammerDuJour is “Lily" who wants me to read about aerosol cans.
She REALLY wants me to, since she hit both my personal main mailbox AND my ASF contributor forwarder. This screenshot is of the HTML version, which is not really different from the plaintext one.
(Coming out of the Alibaba sewer.) -
This morning’s #SpammerDuJour is from the unending fount of poop that is my day job's "careers" inbox, on our .ch domain. Most of that flow is a single uninteresting German-language spammer who always hits twice in the same round, recently advertising office chairs. Sent via the same handful of shoddy VPS providers and networks full of compromised personal machines. Boring.
This one is different. No product. One copy. I 'm being invited to join the Illuminati. In German. Generically...
-
Today’s #SpammerDuJour is one “Lucie Kovacova" of Onvego (.co) spamming via GMail. Using obviously bot-written text to pitch an “AI-powered receptionist" to me as an “executive" in a firm “specializing in managed cloud computing and IT services."
In the B2B spam world, the LLM snake oil is strong: it makes the spam more obvious. -
A rare 2nd #SpammerDuJour...
I don't actually see any of this #spam because the spammer is trying to send my users their garbage with SMTP senders in their own domain, which Will Not Work on my systems, which don't accept putatively local mail without a login. Duh.
I note this because it is coming from all over the place, from what looks like random cracked boxes in places other than US/CA/EU. Spamhaus is picking them up in XBL & CSS & many in PBL because many look like residential service. -
Today’s #SpammerDuJour is whatever operation is using little ISPs in PK and TR to completely trash the eternal mail reputation of all *.best domains.
I say “eternal" because similar events in the past — big #spam runs using various newly-available TLDs — have proven that TLDs born in a flood of spam from ‘free taste' domains NEVER recover their deliverability.
-
Today’s REPEAT winner of the #SpammerDuJour is the asshole who figured out that if they did enough violence to MIME-like formatting and invent their own C-T-Es and types randomly, they can use their freebie MS trial accounts to flood bogus “confirmation” emails to Gmail users.
If you do not use Gmail you don’t ever see that garbage because any halfway-decent spam filter tosses it. Even Gmail spam-folders some of it. It barely has any visibility anywhere else.
-
Nope, it’s not #spam. MS is NOT a #SpammerDuJour. I conceptually ASKED for this.
(was not aware of having a Teams trial. Definitely never wanted it. I don’t *use* MS365, I only *admin* it. )
-
Today’s #SpammerDuJour is an arcane web form spammer.
Every half hour (plus a little) for multi-hour and occasionally day+ periods, some machine in 46.219.231.0/24 registers a new user on a lightly-monitored WordPress site currently in a “maintenance” mode that makes registering useless. User name is a www.<redacted>.blogspot.com, which redirects eventually (x5) to a video which appears to be a Russian or Ukrainian financial scam.I do not understand how that can earn...
#InfoSec