<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Mick, can you post the original message with headers etc?</p>
<p>When I click your link I just get this</p>
<p><img src="cid:part1.9EB7CCC1.DA7DA6FA@aktivix.org" alt=""></p>
<div class="moz-cite-prefix">On 02/02/2019 10:18,
<a class="moz-txt-link-abbreviated" href="mailto:mickfuzz@clearerchannel.org">mickfuzz@clearerchannel.org</a> wrote:<br>
</div>
<blockquote type="cite"
cite="mid:4dfbf9d1-6027-6029-9fa0-d87eae72022e@clearerchannel.org">
<pre class="moz-quote-pre" wrap="">Ok thanks,
So it does seem to be from compromised accounts not spoofing?
I mean just to clarify, This is a phishing email. Although phishing and
spam as well it seems.
And clicking on that link for me showed a rise up logo, my email, and
log back in message.
So clearly directly targeting riseup email users.
That's why I mention it of interest rather than the usual bank type
phishing emails.
nice one
Mick
On 02/02/2019 10:07, bou wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">lots of these now.
Accounts seem to have been compromised, confirmed by two people from
other lists.
This is the first time i see it happen to a 'cool' address tho
On 1/2/19 8:51, m3shrom wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Hi all
and sam,
this seems a very suspicious message - please don't log in till it's
checked
Anyone come across this before?
Thanks
Mick
On 31/01/2019 23:30, <a class="moz-txt-link-abbreviated" href="mailto:samuk@disroot.org">samuk@disroot.org</a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Display trusted message
<a class="moz-txt-link-rfc2396E" href="http://web.loadingsecure-mail.host/5c5384cfb83a885431fa2a66?bF2MJkw=&eRFgffiJ=L04N3FKaJPg&bF2MJkw=caLbxmWH5Q"><http://web.loadingsecure-mail.host/5c5384cfb83a885431fa2a66?bF2MJkw=&eRFgffiJ=L04N3FKaJPg&bF2MJkw=caLbxmWH5Q></a>
Riseup 18:29:19 31-January-2019.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">_______________________________________________
HacktionLab mailing list
<a class="moz-txt-link-abbreviated" href="mailto:HacktionLab@lists.aktivix.org">HacktionLab@lists.aktivix.org</a>
<a class="moz-txt-link-freetext" href="https://lists.aktivix.org/mailman/listinfo/hacktionlab">https://lists.aktivix.org/mailman/listinfo/hacktionlab</a>
</pre>
</blockquote>
</blockquote>
<pre class="moz-quote-pre" wrap="">
_______________________________________________
HacktionLab mailing list
<a class="moz-txt-link-abbreviated" href="mailto:HacktionLab@lists.aktivix.org">HacktionLab@lists.aktivix.org</a>
<a class="moz-txt-link-freetext" href="https://lists.aktivix.org/mailman/listinfo/hacktionlab">https://lists.aktivix.org/mailman/listinfo/hacktionlab</a>
</pre>
</blockquote>
</body>
</html>