You have a new notification from avijitshee88 at gmail.com. View?

[Andreas Kusalananda Kähäri]

The spam did not originate nor pass through GMail's servers.  It came
via mail0.info-emailer.com [174.37.119.125], so no reason to think that
the account has been taken over (their address book may be floating
around in dark waters though).

The spam and spammer isn't really interesting though.  I think it's more
interesting that it was let through.  The list software should do a bit
more than a naïve string match against the "From:" field...


On Mon, Dec 01, 2014 at 03:17:21AM -0600, Ryan Schmidt wrote:
> 
> On Dec 1, 2014, at 2:36 AM, Andreas Kusalananda Kähäri wrote:
> 
> > Um, the two addresses
> > 
> >    "avijitshee88 at gmail.com" <info at info-emailer.com>
> > 
> > (spammer) and
> > 
> >    avijitshee88 at gmail.com
> > 
> > (not spammer) are not the same.
> 
> Until you mentioned it, I was not aware that the second address you mentioned was involved in this issue. I have not seen the original message, and the copy in our archives does not show the full headers. It only shows the first address.
> 
> The second address you mentioned is not subscribed to the MacPorts lists. The first is.
> 
> Upon further investigation, info-emailer / flipora / flip / infoaxe appears to be a phishing site. Clicking on a link in their email apparently causes them to have access to your gmail account, which it then uses to spam your contacts:
> 
> http://geeksofgotham.com/2012/01/23/flipora-flip-infoaxe-spam/
> 
> 

-- 
Andreas Kusalananda Kähäri
Bioinformatics Developer
BILS, Uppsala University, Sweden