[ale] New style of email attack?

[Joey Kelly]

On Wednesday, May 4, 2022 2:14:48 PM CDT Bob Toxen via Ale wrote:
> On Wed, May 04, 2022 at 01:35:10PM -0500, Joey Kelly via Ale wrote:
> > On Tuesday, May 3, 2022 7:52:27 PM CDT Neal Rhodes via Ale wrote:
> > > We've seen two instances of what might look like a new flavor of
> > > phishing attack.
> > 
> > spearphishing
> 
> Of course spearphishing but the issue is how did the hacker form the
> connection between Neal and the small business in Canada?

Don't confuse me with facts, please.

But yeah, I'm puzzled about how the connections are made. Man-hours or good AI 
would be needed to do that kind of recon.

--Joey

> 
> Bob
> 
> > > My wife got an email ostensibly from a local HVAC contractor we have
> > > used in the past, asking her to click on a link to view an RFP and see
> > > if she wants to work with them on it.  She knew enough to smell a rat
> > > and delete it.
> > > 
> > > And today, I got an email from a campground in Canada where I made a
> > > reservation, asking for me to buy an Amazon Gift card for their family
> > > 'cause they had a heart attack, and they will pay me back.   In that
> > > case, the reply address was XXXXXXX at outlook.com, when in fact the real
> > > emails from the park were sent from XXXXXXX at somethingsomething.ca.
> > > 
> > > It's like some attack is floating around which just harvests
> > > combinations of To/From email addresses, and they blast out various
> > > attempts to fool people.
> > > 
> > > I've only seen a couple like that.  Do I just not get out much?
> > > 
> > > Is this ringing a bell?
> > > 
> > > Neal
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> https://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo


-- 
Joey Kelly
Minister of the Gospel and Linux Consultant
http://joeykelly.net
504-239-6550