[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
On Tue, Apr 3, 2012 at 3:40 PM, badapple wrote: > A quick check of the email headers as compared to my usual details show > these two spams originated from this IP address: 92.48.118.11. A quick whois > shows the netblock belongs to Simply Transit Ltd/AS29550 and a quick google > shows they are known spammers. Case closed. I know my password is secure and > has been changed anyway just to be on the safe side, but it's a standard > case of forged headers anyway. I don't see forged headers - AFAICT the email was sent from Yahoo. 92.48.118.11 is pi.a-squared.co.uk which hosts the LUG list server. > And as for a keylogger being involved, um, no. That at least gave me a > good laugh. I think it's the most likely way for webmail accounts to get compromised. That, or phishing. Martijn. -- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/listfaq