¿ªÔÆÌåÓý

Spam


 

I'm being deluged by spam to my yahoo list owner addresses. They're all the
unpaid invoice threatening emails that I've read are either phishing attempts
or contain links with ransom ware. I am careful of course but worried I might
click on something by mistake.

Just wondering if io group owner addresses are potentially open to these attacks
even if less likely as io has fewer groups so far?

Thanks,
Louise

Sent from my iPad


 

I have been getting similar emails to yahogroup -owner email addresses, so I am interested in the answer to this as well.

On 14 Mar 2016 11:13, "Louise via Groups.io" <knitlou=[email protected]> wrote:

I'm being deluged by spam to my yahoo list owner addresses. They're all the
unpaid invoice threatening emails that I've read are either phishing attempts
or contain links with ransom ware. I am careful of course but worried I might
click on something by mistake.

Just wondering if io group owner addresses are potentially open to these attacks
even if less likely as io has fewer groups so far?

Thanks,
Louise

Sent from my iPad



J_Olivia Catlady
 

My Groups.io groups are getting attempts to email the group (about one per week) from the phony addresses re 'your electric bill' to email the group. They are logged as attempts by non-subscribers and (of course) rejected. There has been no email to my owner addresses.

I don't know what's going on in yahoo groups. I don't go there any more.
J

Sent from my iPhone

On Mar 14, 2016, at 1:26 AM, Louise via Groups.io <knitlou@...> wrote:

I'm being deluged by spam to my yahoo list owner addresses. They're all the
unpaid invoice threatening emails that I've read are either phishing attempts
or contain links with ransom ware. I am careful of course but worried I might
click on something by mistake.

Just wondering if io group owner addresses are potentially open to these attacks
even if less likely as io has fewer groups so far?

Thanks,
Louise

Sent from my iPad


 

Any email address, even if it hasn't been used on a public page, is subject to the spam attacks. The ones that are hot-linked, such as on the Home page of our groups, seem to be added to spam lists more often though. It depends on whether the spammers use sequential addressing to every possible address or harvest them from the web. Apparently there are still enough people that click on the evil links to make it worthwhile to the spammers. There are also the "script kiddies" that do it for fun, just to see if they can.

Looking through the activity logs, I already see one or two (some days, many more) attempted posts by non subscribers nearly every day to most of my groups - usually spam.

Duane


David P. Dillard
 

This is certainly not limited to Yahoo Groups. One of my discussion groups on the Temple University server has been receiving spam messages from a non-subscriber. None have reached the list, but I get error notices for every single one and as a result I am deleting between one hundred to two hundred of these messages daily. Once spammers get an email address, they post to it robotically whether successful or not.



Sincerely,
David Dillard
Temple University
(215) 204 - 4584
jwne@...

On Mon, 14 Mar 2016, Louise via Groups.io wrote:

I'm being deluged by spam to my yahoo list owner addresses. They're all the
unpaid invoice threatening emails that I've read are either phishing attempts
or contain links with ransom ware. I am careful of course but worried I might
click on something by mistake.

Just wondering if io group owner addresses are potentially open to these attacks
even if less likely as io has fewer groups so far?

Thanks,
Louise

Sent from my iPad


 

ANY email address is "potentially open to these attacks"

-----Original Message-----
From: Louise via Groups.io
Sent: Monday, March 14, 2016 04:26 AM
To: [email protected]
Subject: [GMF] Spam

I'm being deluged by spam to my yahoo list owner addresses. They're all the
unpaid invoice threatening emails that I've read are either phishing attempts
or contain links with ransom ware. I am careful of course but worried I might
click on something by mistake.

Just wondering if io group owner addresses are potentially open to these attacks
even if less likely as io has fewer groups so far?

Thanks,
Louise


 

Yes, I realised that - probably should have worded my email differently. What I was wondering was whether it was as easy for spammers to bulk harvest and torment group owners in io as in yahoo groups. Is there no way this could be made harder? Some sort of filter before they get to us maybe? It wouldn't be easy for me to drop my yahoo email addresses at this point but are there email providers who can intercept this type of spam?

Louise

Sent from my iPad

On 14 Mar 2016, at 17:34, Xaun Loc wrote:

ANY email address is "potentially open to these attacks


[excess quote trimmed by moderator]


 

Louise,

What I was wondering was whether it was as easy for spammers to bulk
harvest and torment group owners in io as in yahoo groups.
Probably, given that the +owner email address is listed on each group's home page.

Is there no way this could be made harder?
Groups.io has one option that Y!Groups does not: each owner/moderator has the option to control their receipt of messages sent to the +owner address. On the Subscription page one can choose "All", "Subscribers only", or "None".

Choosing an option other than "All" carries the risk that a legit non-member (perhaps someone trying to join but having difficulties) would be excluded from communicating with you. So it would likely be a good idea for at least one active moderator in each group to choose the "All" setting.

Some sort of filter before they get to us maybe?
I'm sure Groups.io uses some form of validation that any system trying to deliver a message is a "legit" email server. Whatever the state-of-the-art meaning of "legit" is these days. But that still lets through messages from compromised email accounts or from legit servers that have inadequate security on inbound messages. Or servers owned by spammers yet which seem "legit enough".

It wouldn't be easy for me to drop my yahoo email addresses at this
point but are there email providers who can intercept this type of
spam?
Yes. Both my email client (Eudora Classic) and my Gmail account routinely dump spam messages that I've received via an +owner address into my "Spam" folder. They miss some, but fortunately haven't dumped very many (maybe not any) legit messages to +owner.

Shal


 

Yahoo already makes it fairly hard to spam the group-owner address (I've probably gotten a dozen spam emails in as many years via any of my group-owner addresses).

Emails sent to a groupname-owner@... address cannot be BCC and there cannot be multiple group-owner addresses on a single email. This is sufficient to stop casual amateur spammers because the emails cannot be sent to a large number of addresses as a single email. Serious professional spammers use software to generate individual emails for each addressee AND dedicated servers that are paid to allow customers to send out thousands of emails at a time and which change IP addresses frequently to avoid being RBL'ed

Certainly there are tricks that can be used to intercept spam for any address, but those tricks have to be applied at either the receiving mail server or the individual email client.

Spam blocking at the incoming email server often proves to be unsatisfactory for a group-owner address due to the difficulty in developing any generic algorithm that does not generate either excessive false positives or excessive false negatives. Perhaps IO could manage a better spam trap than Yahoo, but I'd expect any aggressive spam trapping to also generate too many false positives.

-----Original Message-----
From: Louise via Groups.io
Sent: Monday, March 14, 2016 15:28 PM
To: [email protected]
Subject: Re: [GMF] Spam

Yes, I realised that - probably should have worded my email differently. What I was wondering was whether it was as easy for spammers to bulk harvest and torment group owners in io as in yahoo groups. Is there no way this could be made harder? Some sort of filter before they get to us maybe? It wouldn't be easy for me to drop my yahoo email addresses at this point but are there email providers who can intercept this type of spam?

Louise

Sent from my iPad

On 14 Mar 2016, at 17:34, Xaun Loc wrote:

ANY email address is "potentially open to these attacks


[excess quote trimmed by moderator]


 

Thanks, Shal. That was really helpful. It looks like I may have to change things my end by using my gmail address if I do anything.

Louise


 

Sent from my iPad

On 15 Mar 2016, at 06:20, Xaun Loc <xaunloc@...> wrote:

"Yahoo already makes it fairly hard to spam the group-owner address (I've probably gotten a dozen spam emails in as many years via any of my group-owner addresses)."

Thanks, Xaun. As I have had vastly more than a dozen spam emails recently I wonder if it is gmail that is the answer as you appear to use that.

I got very confused when setting up my gmail address once as I somehow got my yahoo address linked to it and wasn't sure how wise that was.

Louise


 

Gmail does have some decent tools for filtering out spam, which I'm sure occasionally helps, but not all my Yahoo group-owner addresses forward to Gmail. From what you say, it seems that one or more of your Group-owner addresses has been targeted by some particularly high volume spammer.

You might want to look into reading the emails and especially the headers, to see if you can find a common factor to help filter them out.

-----Original Message-----
From: Louise via Groups.io
Sent: Wednesday, March 16, 2016 04:35 AM
To: [email protected]
Subject: Re: [GMF] Spam



Sent from my iPad

On 15 Mar 2016, at 06:20, Xaun Loc <xaunloc@...> wrote:

"Yahoo already makes it fairly hard to spam the group-owner address (I've probably gotten a dozen spam emails in as many years via any of my group-owner addresses)."

Thanks, Xaun. As I have had vastly more than a dozen spam emails recently I wonder if it is gmail that is the answer as you appear to use that.

I got very confused when setting up my gmail address once as I somehow got my yahoo address linked to it and wasn't sure how wise that was.

Louise