Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

hundreds of returned email warnings received

Posted on 2012-03-10
2
Medium Priority
?
659 Views
Last Modified: 2012-03-10
Our client suddenly started to received hundreds of email warnings, receipts, returned notifications etc. The notifications seem to come from a myriad of sources globally.

We first checked the PC for virus activity using NOD32 and Malwarebytes but found no infection. We checked all running processes and found nothing unusual.

Checking the date/time of the notifications shows that they continue 24/7 even when the PC is switched off, thus we have kind of ruled out the PC as being a source of SPAM.

We installed Spamfighter which removes about 1/2 the notifications automatically, which still leaves a huge amount to be deleted each day, but of course this is only masking the problem.

The email address is their main contact so it is "enquiries@xxxxxxxxx.org.uk" (xxxxxxxxx replacing their domain name) so I'm wondering if their email address is being used by a maliceous party.

I'm out of ideas what to do next to try find and halt the source, thus if anyone has any suggestion what to try next, it would most appreciated.
0
Comment
Question by:ensite31
2 Comments
 
LVL 3

Accepted Solution

by:
IMIronMan earned 2000 total points
ID: 37705016
It is probable you are victim of of Backscatter:
http://www.spamresource.com/2007/02/backscatter-what-is-it-how-do-i-stop-it.html

Pay close attention to the area "If you are an Administrator"

Also, never post e-mail addresses on a webpage, neither viable on the page or in the source code.  Use a contact form and script.

Easiest way to stop it, if it is just the one e-mail address is to change it.  Probably not do-able since the client uses this in marketing materials???  

They're are many Third party services that you can run your mail through before reaching your mail server they may help.

You could spend much time and money "cleaning" this e-mail address, or ...
Make the changes to your server as suggested in the above link, then creates a new general delivery e-mail, and makes sure it doesn't appear on your client's website.

Another good article:
http://backscattervictims.blogspot.com/
0
 

Author Comment

by:ensite31
ID: 37705118
Thanks IMIronMan, that's very useful information, appreciate your help.
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes how to import Lotus Notes Contacts into Outlook 2016, 2013, 2010 and 2007 etc. with a few manual steps. You can easily export and migrate Lotus Notes contacts into Microsoft Outlook without having to use any third party tools.
With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question