[Box-Admins] The vm-dev-owner mail address is currently under spam bot attack

[David T. Lewis]

On Thu, Jul 20, 2017 at 04:58:07PM +0200, Levente Uzonyi wrote:
> Hi Dave,
> 
> Can you post all the headers of one such email?
> 
> Levente

Attached is a gzipped copy of one of the emails.

My guess would be that this is some kind of attempt to hack into the
mailing list as a means of spamming the list.

The qq.com domain does not narrow it down much, apparently this is a
very large email and social media site in China, so blocking qq.com would
be like blocking google mail.

Dave




> 
> On Thu, 20 Jul 2017, David T. Lewis wrote:
> 
> >Just FYI, the vm-dev-owner at lists dot squeakfoundation dot org address, 
> >which
> >redirects to my personal mail, is currently under attack by someone 
> >(something)
> >using a qq.com related spoof address. I am getting a couple of messages 
> >per minute,
> >so it is somewhat annoying.
> >
> >- Dave
> >
> >
> >A typical message:
> >
> >X-Original-To: vm-dev-owner at lists.squeakfoundation.org
> >Delivered-To: vm-dev-owner at mail.squeak.org
> >Date: Thu, 20 Jul 2017 21:33:39 +0800
> >Subject: 
> >=?utf-8?Q?=E7=8B=AC=E5=AE=B6=E6=B3=A8=E5=86=8C=E7=B3=BB=E7=BB=9F=EF=BC=8C=E8=BF=8E=E6=96=B0=E7=89=B9=E6=83=A0=EF=BC=8C=E7=A7=92=E9=80=8188=EF=BC=8C7771584.com=20,
> >?=
> >????????????????????????Q???2946128527?????????????????????????????????????????????
> >To: vm-dev-owner at lists.squeakfoundation.org
> >From: 418111563 at qq.com
> >Errors-To: mailman-bounces at lists.squeak.org
> >
> >[-- text/html is unsupported (use 'v' to view this part) --]
> >
> >
> >
> >
> >
> >
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 358876681.gz
Type: application/octet-stream
Size: 1438 bytes
Desc: not available
URL: <http://lists.squeakfoundation.org/pipermail/box-admins/attachments/20170720/b9548280/attachment.obj>