full-disclosure - Strange Emails -- What are they?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4486E4EB.8020908@snosoft.com>
Date: Wed Jun  7 15:38:44 2006
From: simon at snosoft.com (Simon Smith)
Subject: Strange Emails -- What are they?

Ok,
    So I've done a bit more digging and I am seeing a lot more of these.
The sources are very different from each other. Some of them come from
china, some from europe, etc. The one thing that is really bugging me is
that none of these emails contain legitimate return paths.

Michael Holstein wrote:
>> Is this just another instance of spammers fishing for legit addresses?
>> If so, then why the hell are they sending email from invalid addresses?
>> I can dig into this a lot further if I need to, but I wanted to see if
>> anyone else had any ideas about it first.  Thanks in advance!!!
>
> Yes (just spam -- address harvesting). There was some discussion about
> this exact issue yesterday over on UNISOG :
>
> http://www.dshield.org/pipermail/unisog/2006-June/
>
> /mike.