[Scspamcop] Re: Phishing for Spamcop accounts

[rooster]

Bar0 wrote:
> 
> "Opinicus" <gezgin at spamcop.net> wrote in message 
> news:ga8slh$7ps$1 at news.spamcop.net...
>> "Peter Pearson" <ppearson at nowhere.invalid> wrote in message 
>> news:ga8rig$ip$1 at news.spamcop.net...
>>
>>> I've just received email phishing for Spamcop account information.
>>> Subject: UPDATE YOUR ACCOUNT / SPAMCOP.NET
>>> It contains an amusing explanation of its non-Spamcop reply address.
>>
>> Just caught one too:
>> http://www.spamcop.net/sc?id=z2234695079z4d9b809aeeaf51358f97190d84e7b575z 
>>
>>
>> What could they possibly want the account info for?
>>
> 
> Well, if it's an SC Mail account they could start spamming from SC.
> 
> If it's also or just a reporting account, they could generate masses of 
> bad complaints and listings.
> 
> Reputation?
> 

Reputations/credibilities could well be involved. There could also be 
broader,
more ambitious (nefarious) objectives, intended to damage the internet's 
anti-
spam infrastructure.

Some back-channel info from Steve Linford: (Note [~Square brackets~] are 
mine~)

 >This is a joe-job spam, sent by a spammer who is harvesting addresses
 >from every anti-spam place he can find in order to hit as many anti-
 >spammers as possible, hoping to get his competitor (another Russian
 >[~product~] website) shut down. Obviously he's harvesting [~anti-spam 
list name withheld~]
 >amongst others.

 >   Steve Linford

SC Mail List/Accounts security notwithstanding, if the spammer in 
question, or his spamming agent (spag)
captures a couple of SC subscriber 'home' email addresses, he'd have 
enough info to start a hacking regime
that could do considerable damage.
E.g. Register snowshoe spam accounts/domains on servers upstream from 
both subscriber(s) and possibly
SC/Ironport, to get IP Blocks listed on SBLs. I'm bearing in mind that 
many large and small
ISPs, MTAs and hosting providers maintain their own BLs that often 
include entire
/8s and /16s, thus making the destructive potential of such a regime 
unpleasant to contemplate.

I'm not current with SC Forum/News posts, but if the following article 
didn't get
mentioned during the week, y'all  might find it interesting. Two fingers 
of Glendronach
or a judicious selection from the benzodiaphamine family might make the 
reading
easier (to take).
http://www.theregister.co.uk/2008/09/05/rock_phish_and_asprox_team_up/

-- 
Happy trails,
rooster
boundary beach, bc