[CRTech] Christian Radio Tech [MSG 79312]
[Thread Prev] [-- Thread Index --] [Thread Next] [Date Prev] [-- Date Index --] [Date Next]
Re: Caution: targeted infected email supposedly from "CRTech"
To: CRTech <crtech@crtech.org>
Subject: Re: Caution: targeted infected email supposedly from "CRTech"
From: "Allard, Mark G" <MGAllard@unwsp.edu>
Date: Wed, 29 Mar 2017 13:38:15 +0000
Accept-language: en-US
Content-language: en-US
Thread-index: AdKokbfkXgxffNiVQE28ckCdZDt7SA==
Thread-topic: [CRTech] Caution: targeted infected email supposedly from "CRTech"

Thank you Sherrod.

On Mar 29, 2017 7:53 AM, Sherrod Munday <smunday@ieee.org> wrote:
Good morning, CRTech!  

I have to say -- in all my years of using email, this is the first time I've seen this specific ploy against a listserv.  Either someone on this list just got smacked with a virus that scraped their inbox for possible targets, or something/someone is looking at online archives to gather addresses and other info to appear more legitimate.

The email was delivered directly to my email address -- **NOT** through the CRTech listserv.

My spam filter caught and flagged it, but it's interesting to me that the virus/sender used a name & .sig of "CRTech" with a return email address of something related to radio.  (I can't tell if the email is from a valid CRTech listserv member or not -- I don't recognize "voxrox" as anyone who's posted before, and I don't know the other recipients either.)   The headers reveal that the email originated in France. 

The link (removed for obvious reasons) goes to some offshore site - no doubt it hosts either a phishing attack or just pure malware/ransomware.

This is just another great example why you need to be careful and examine each email for links and content that may look legitimate upon a cursory glance.

To paraphrase the tag line some others use here on the list:

"Always Vigilant",


Begin forwarded message:

From: "CRTech" <voxrox@voxroxradio.com>
Subject: nice place
Date: March 29, 2017 at 5:30:23 EDT
To: "Sherrod Munday" <smunday@ieee.org>, "a.j.petrella" <a.j.petrella@ieee.org>, "kevin.m.speer" <kevin.m.speer@ieee.org>

I've recently visited a nice place, just take a look, you're going to love it for sure! Here are some pics of it (link removed).
Looking forward, CRTech

Sherrod Munday

Prev by date: Caution: targeted infected email supposedly from "CRTech"
(Sherrod Munday, 29 Mar 2017 12:53:33 -0000)
Next by date: Re: Barix as backup STL
(Dave Land, 29 Mar 2017 13:51:49 -0000)
Prev by thread: Re: Caution: targeted infected email supposedly from "CRTech"
(Sherrod Munday, 30 Mar 2017 16:23:56 -0000)
Next by thread: TV Antenna For Sale
(Dave Land, 30 Mar 2017 15:08:29 -0000)