GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Email received stating email server is distributing phishing scams

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Email received stating email server is distributing phishing scams Page: [1]
Login
Message << Older Topic   Newer Topic >>
Email received stating email server is distributing phi... - 6.Aug.2008 11:25:15 AM   
jreichner

 

Posts: 2
Joined: 28.Feb.2008
Status: offline 		At 10:30 AM today I received an email that was caught by mail essential throught the character set filter (Central Europe). The email was intended for our abuse email address. The email came from the following email address:

security@cyf-kr-edu.pl

The origional subject states that my server is compromised/misconfigured distributing spam (phishing).

There is more data in the body that seems to provide information about my front end email server that is running ME 12 and my back end server that is running exchange 2003. Is this email valid? I have tested my front end server and it is not relaying any email. Is or has anyone experienced the same issue?

Any advice would be appreciated.

Thanks!
Post #: 1
RE: Email received stating email server is distributing... - 7.Aug.2008 8:28:41 AM   
spidermouse

 

Posts: 63
Joined: 27.Jul.2006
Status: offline 		This might help a little:

http://groups.google.co.uk/group/Gmail-Help-Message-Delivery-en/browse_thread/thread/4aaea12f9e94822c/eacd319d966f9780?hl=en&lnk=st&q=security%40cyf-kr-edu.pl#eacd319d966f9780

_____________________________

Regards,

Spidermouse

----------------------------------------------------------
Mythbusters - busting myths since 1972...

(in reply to jreichner)
Post #: 2
RE: Email received stating email server is distributing... - 7.Aug.2008 2:43:19 PM   
John Letourneau

 

Posts: 1124
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline 		jreichner,

This email sounds like it could be a phishing email itself but could possibly be legitimate.  Can you post the message headers of this message?  Feel free to edit out your IP/Hostnames.

_____________________________

Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com

(in reply to spidermouse)
Post #: 3
RE: Email received stating email server is distributing... - 18.Aug.2008 10:45:16 AM   
jreichner

 

Posts: 2
Joined: 28.Feb.2008
Status: offline 		John,

I received a call from my ISP recently stating that they have received a complaint stating that I am forwarding phishing scams...I am waiting for more information from them and I will post the additional information once I have it in my possession.

Thanks for getting back to me.

Jim

(in reply to John Letourneau)
Post #: 4
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Email received stating email server is distributing phishing scams Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software