In the past spammers have spoofed my email name by putting it into the "From" field to get around the exclusivity lock (since you can't ban your own email address). To get around that I wrote a Rule to check the "From" field and if it was from myself the incoming email would be moved to a "suspicious" folder.
Well the spammers have figured out how to get around all these defenses - using multiple "From" fields.
The first "From" field would be empty, the second "From" field would be my spoofed email address, the third "From" field would be their "rolling" email.
It gets around all the filters and rules and plops in my Inbox.
Example:
******************************************
From:
From: [this is where my spoofed email address would be inserted]
From: *** Email address is removed for privacy ***
Subject: View Your Free Credit Scores as of [August,23]
Date: Fri, 23 Aug 2013 10:26:40 -0400
*******************************************
Actually I notice even just having just two "From" fields as long as the first one is blank gets around my Rules and "exclusivity" settings.
Example:
******************************************
Subject: Need Affordable Tires? Search Results: GoodYear, Michelin, Firestone, TOYO, Pirelli & More!
From:
From: *** Email address is removed for privacy ***
Date: Fri, 23 Aug 2013 08:13:16 -0700
******************************************
I can't make a Rule where the "From" field is empty since that is not available in the Rules combobox.
So I'm stuck!
From:*** Email address is removed for privacy ***
Dear *********************
In order to keep our customers safe, we had to suspend your e-mail account. This happened because your e-mail was tagged as a VIRUS account.
That's why you're prompted to verify your account to re-activate your Hotmail e-mail service by following the link below:
http://du598w.dub452.mail.live.co.uk/mxil/HEpLight.aspx?HOP-VER=wli&n=48902409
Spammers sometimes use automated programs to create WindowsLive or other email accounts and then send unsolicited spam messages to others.
When you click the verification link, you're asked to login again on our secured website. By completing our verification form, you prove that you're a human, and not a spam program.
Hotmail will occasionally prompt you to verify your account again, just to make sure you're still you and your account hasn't been compromised for spam purposes.
Thank you ,
WindowsLive e-mail security department
I havnt yet clicked on the link as i dont think its legit, any help would be great , thanks :)
Recent Comments