Spam being sent to my LSAC email address Forum

[Rob Crow]

I set up an email address specific to LSAC. My LSAC account is the only place I ever it.

I'm now receiving spam (Viagra, itunes gift cards, etc) to that account.

Anybody else experiencing this? It might be hard to track if you didn't have a system set up like mine, but recent two subject lines include:

"Only in our Casino USA&EU Players are welcome !!!Bonus 350$
"Pharmacy------------Online !!!

(both sent in the last 48 hours).

It seems as though either a school who is renting the list or else LSAC itself has either been hacked or has had their list sold.

LSAC had no response when I forwarded it to their customer service email address.

[r6_philly]

Is it like MSN/Yahoo/Gmail or a thirdparty domain?

Some spammers can crawl not-so-well protected domains to find user directories to identity email addresses.

Yet others just systematically auto generate combinations to send out email, without actually knowing if the address is valid.

If your new email is like XgeUs3Dw12DafE9@gmail.com then I say LSAC is the one that leaked your email.

if your new email is like robcrow22915@gmail.com I say spammer generated your email.

Once the email doesn't bounce, it is then validated as a valid address and spammers share lists so you should expect to get more spam.

[cheesus]

It's funny that you mention that, because I have been getting a lot of similar spam since signing up for LSAC. Prior to that I barely ever received any.

[stratocophic]

I never received spam (literally not one email) until recently. I'd been wondering what changed; it would appear the LSAC is the culprit

[CyLaw]

Is it like MSN/Yahoo/Gmail or a thirdparty domain?

Some spammers can crawl not-so-well protected domains to find user directories to identity email addresses.

Yet others just systematically auto generate combinations to send out email, without actually knowing if the address is valid.

If your new email is like XgeUs3Dw12DafE9@gmail.com then I say LSAC is the one that leaked your email.

if your new email is like robcrow22915@gmail.com I say spammer generated your email.

Once the email doesn't bounce, it is then validated as a valid address and spammers share lists so you should expect to get more spam.

TITCR

[Sauer Grapes]

....

[r6_philly]

you guys are making causal conclusion out of possible coincidents. SPAM technology develops rapidly, and recently some spam has been able to compromise server filters better. I receive over 10000 SPAM per day on all the domains I administer. My users rarely see any, they usually get filtered/blocked at the server but quite a few sneaks through regularly. They change their tactics and servers so it's always a losing batter.

[r6_philly]

Other than TTT schools emailing me frequently, I haven't received any other spam on my LSAC address.

I was surprised to get one from William and Mary, and it landed in the SPAM filter initially lol

[Rob Crow]

Is it like MSN/Yahoo/Gmail or a thirdparty domain?

Some spammers can crawl not-so-well protected domains to find user directories to identity email addresses.

Yet others just systematically auto generate combinations to send out email, without actually knowing if the address is valid.

If your new email is like XgeUs3Dw12DafE9@gmail.com then I say LSAC is the one that leaked your email.

if your new email is like robcrow22915@gmail.com I say spammer generated your email.

Once the email doesn't bounce, it is then validated as a valid address and spammers share lists so you should expect to get more spam.

TITCR

In this case, the email address is at my own, private domain, and the username was fairly unique.

[r6_philly]

In this case, the email address is at my own, private domain, and the username was fairly unique.

When you create the address, does it create a public directory that can be crawled? Usually like /usr/.../home/html or something similar.

What's fairly unique? If you try it out on a password strength test would it be a strong password (upper, lower case, numbers, no valid words)?

I know some spammers find a domain and brute force combinations all day. I look at the spam I get and they are doing just that using dictionary lists and I know they crawl my folders because if I set one up give it a week or so I get spam. It is harder to ban originating servers now they just spoof or proxy their mail servers or use botnets with authentic non-spam ips.

[Tangerine Gleam]

Yo Rob, I love your records (especially the new Pinback). Let's hang out again next time I come through SD.

[rx3r]

I've been having this problem too.

[scottstot]

Now that you mention it, my spam folder has been packed full of "pharmaceutical" advertisments lately and I never got them before.

[richardfitzwell]

I set up an email address specific to LSAC. My LSAC account is the only place I ever it.

I'm now receiving spam (Viagra, itunes gift cards, etc) to that account.

Anybody else experiencing this? It might be hard to track if you didn't have a system set up like mine, but recent two subject lines include:

"Only in our Casino USA&EU Players are welcome !!!Bonus 350$
"Pharmacy------------Online !!!

(both sent in the last 48 hours).

It seems as though either a school who is renting the list or else LSAC itself has either been hacked or has had their list sold.

LSAC had no response when I forwarded it to their customer service email address.

Stop looking at PORN! most likely a keyloger.

[rolark]

I have several accounts (one for personal stuff, one for registering to things online, etc.), and I gave LSAC my personal one. Very recently, I started getting spam for the first time after several years with the address. It looks like it's for the same things you're getting.

Yes, this could just be coincidence, but there's also a chance it's not.

[richardfitzwell]

I have several accounts (one for personal stuff, one for registering to things online, etc.), and I gave LSAC my personal one. Very recently, I started getting spam for the first time after several years with the address. It looks like it's for the same things you're getting.

Yes, this could just be coincidence, but there's also a chance it's not.

it could be that a law school was hacked/careless/etc that had all of your email addresses and its totally independent of LSAC too.

[maks25]

If you call mail from Cooley spam, then yes.