spammer found internal e-mail adresses

[Govert J. Knopper]

Somehow a spammer found email adresses in my company from people who never,
or seldom, do anything on the Internet. I believe it started with the
replica Rolex watches a couple of weeks ago (near Valentine's day) and the
other spam since that seems to have the same origin. Looks like he got
somebody's addressbook. Any ideas how he might have collected these
adresses? Do spammers use viruses for this purpose?

Govert

 

[David H. Lipman]

"Govert J. Knopper" <gkn at nospamdereumaux dot com> wrote in message
| Somehow a spammer found email adresses in my company from people who never,
| or seldom, do anything on the Internet. I believe it started with the
| replica Rolex watches a couple of weeks ago (near Valentine's day) and the
| other spam since that seems to have the same origin. Looks like he got
| somebody's addressbook. Any ideas how he might have collected these
| adresses? Do spammers use viruses for this purpose?
|
| Govert

Could very well be Trojan and/or Virus activity on your LAN that captured the addressbook
data.

What have you done to check each and every PC for malware ?

I addition, somebody may have emailed someone outside the company, and was added to that
recipient's addressbook, subsequently the recipient is infected with a virus thus the
recipient's addressbook was compromised.

 

[ABC]

"Govert J. Knopper" <gkn at nospamdereumaux dot com> wrote in message
| Somehow a spammer found email adresses in my company from people who
never,
| or seldom, do anything on the Internet. I believe it started with the
| replica Rolex watches a couple of weeks ago (near Valentine's day) and
the
| other spam since that seems to have the same origin. Looks like he got
| somebody's addressbook. Any ideas how he might have collected these
| adresses? Do spammers use viruses for this purpose?
|
| Govert

Could very well be Trojan and/or Virus activity on your LAN that captured
the addressbook
data.

What have you done to check each and every PC for malware ?

I addition, somebody may have emailed someone outside the company, and was
added to that
recipient's addressbook, subsequently the recipient is infected with a
virus thus the
recipient's addressbook was compromised.

Could also be a dictionary attack.