Friday, May 28, 2021

Spamelot Phishalot

I am being bombarded with spam, phishing spam. Nothing like the Nigerian scam emails, this stuff is sophisticated. Good graphics, 99% correct spelling; a number of click-on links; & with complex sender addresses that seem to indicate advanced programming & redirection abilities. I'm getting 30 to 40 a day. I can't block them because they're already identified by Gmail as spam. All I can do is report them as phishing messages.

A few samples of the sender addresses:

ABC Ethereum i39u9aiqhonxhjj@mjzgobktbvg23xpkp.us via mtnubdevpf849twe9z.94l4kzb071qhf8d.stataschool.gr.com

China Crypto wmm2awbl8jt43s7@durzrgtoozsg49chfnwbn.us via 653977295hi228366.2npjqfng3myshr6308k4slndczsoo10wxmdczze2--------------.ec2-208.67.249.123.us-west-2.compute.amazonaws.pyramid.systemshows.com

NESPRESSO UTZM2CAH.BV0ZYGCR@uwpttovjzxnqkhbyliie.us via bwuryj.53034-------.bzq-84-110-57-121.cablep.bezeqint.net

NESPRESSO G6O2CLP4.YSZ2LPNE@dxumfgvafloaguhdwsia.us via agdgon.62319-------.constantly.assistancewartime.com

China Crypto Bonus99-nooreply6F1QUVW...@6f1quvwqggmpmy5.us via mendiparc.bounabil18.earthosting.eu.org

Ethereum Invest J1B9HTO8.XIYNDZJH@fqoaeokirwniinxfrsri.us via malolajs.14mlo.foya.earthosting.eu.org

Ethereum Invest 6OU9HQV8.FCF9PZDQ@wdjjjicjdrwlzxsugvjw.us via malolajs.14mlo.foya.earthosting.eu.org

China Coin 7956@ro1zd4djeqrzxn7.us via sqnxqodmqwxqcmrkedmp.yj1ryikyt8fijxn.sxmvwjo14yqpz5nu1f.worldof.drivercycle.com


A few samples of the visuals :





Note the common address to write to if you want to unsubscribe. That's this place.


It's up for sale for $2.5 million if you want to buy it. I think it's empty.

Somebody who's obviously being subjected to the same bombardment as myself has tweeted: "As far as I can tell, that address is either a walk-in shipping/courier service, or maybe a hotel. (It's a weird block that's hard to navigate on streetview.) Clearly just an address harvested from somewhere that doesn't actually mean anything/an attempt at appearing legit."

I have a theory about these emails. It's to do with cryptocurrency mining. Since I can't discern any logic in plastering my email with a plethora of annoying & repetitive messages, I'm forced to believe that, possibly buried in that sender address, is an ongoing mining operation. Will continue to believe that unless someone comes up with an alternative theory.

No comments: