30 Oct
2013
30 Oct
'13
11:03 a.m.
On Wed, Oct 30, 2013 at 9:01 AM, Steve Berl <steveberl(a)gmail.com> wrote:
The spam From: field says "john re
<giovanni-re(a)yandex.com>"
The real emails seem to come from "giovanni_re" <john_re(a)fastmail.us>
The spam emails all came from:
giovanni-re(a)yandex.com
carefullychipped(a)yandex.com
Neither of these had posted to the list before, and both were banned.
A pattern also became clear after yet another new subscriber showed
up, named:
yardena.cohen(a)yandex.com
Creepy! At that point I just decided to ban everything from
yandex.com, which seems to have stopped the problem. There were no
other subscribers from that domain.