I have been getting a lot of e-mail spam from European educational
establishment domains in Belgium and Portugal such as 'scheuler.kae.be',
it seems a former e-mail contact of mine must have been hacked as their
name is quoted as the 'sender' but not the actual source of the e-mails

Although they are successfully diverted to my spam/junk folders they
persist in coming.

Does anyone have any sensible suggestions as to how I can stop these?

Jack Harry Teesdale wrote:

> I have been getting a lot of e-mail spam from European educational
> establishment domains in Belgium and Portugal such as 'scheuler.kae.be',
> it seems a former e-mail contact of mine must have been hacked as their
> name is quoted as the 'sender' but not the actual source of the e-mails
>
> Although they are successfully diverted to my spam/junk folders they
> persist in coming.
>
> Does anyone have any sensible suggestions as to how I can stop these?

This sort of thing happens in waves, you can't really stop it, but
sounds like you have at least two strings to match on in your kill file?

On 28/02/2023 20:14, Andy Burns wrote:
> Jack Harry Teesdale wrote:
>
>> I have been getting a lot of e-mail spam from European educational
>> establishment domains in Belgium and Portugal such as
>> 'scheuler.kae.be', it seems a former e-mail contact of mine must have
>> been hacked as their name is quoted as the 'sender' but not the actual
>> source of the e-mails
>>
>> Although they are successfully diverted to my spam/junk folders they
>> persist in coming.
>>
>> Does anyone have any sensible suggestions as to how I can stop these?
>
> This sort of thing happens in waves, you can't really stop it, but
> sounds like you have at least two strings to match on in your kill file?
>
Thanks, I have already done as you've said and set up a number of kill
files.

On 28 Feb 2023 at 19:31:58 GMT, "Jack Harry Teesdale"
<noreply492000-medic@yahoo.co.uk> wrote:

> I have been getting a lot of e-mail spam from European educational
> establishment domains in Belgium and Portugal such as 'scheuler.kae.be',
> it seems a former e-mail contact of mine must have been hacked as their
> name is quoted as the 'sender' but not the actual source of the e-mails
>
> Although they are successfully diverted to my spam/junk folders they
> persist in coming.
>
> Does anyone have any sensible suggestions as to how I can stop these?

Just keep on filtering them to your Junk mailbox. If your spam system in teh
client is any good it should learn to do that for itself, eventually.

--
"It is hard to imagine a more stupid decision or more dangerous way of making decisions than by putting those decisions in the hands of people who pay no price for being wrong." -- Thomas Sowell

On 28/02/2023 19:31, Jack Harry Teesdale wrote:
> I have been getting a lot of e-mail spam from European educational
> establishment domains in Belgium and Portugal such as 'scheuler.kae.be',
> it seems a former e-mail contact of mine must have been hacked as their
> name is quoted as the 'sender' but not the actual source of the e-mails
>
> Although they are successfully diverted to my spam/junk folders they
> persist in coming.
>
> Does anyone have any sensible suggestions as to how I can stop these?

Are they coming from the actual mailbox of the hacked account - or just
claiming to be from that address? If the former, you might have some
scope for contacting the provider.

--
Cheers,

John.

/=================================================================\
| Internode Ltd - http://www.internode.co.uk |
|-----------------------------------------------------------------|
| John Rumm - john(at)internode(dot)co(dot)uk |
\=================================================================/

Not really, as it will be somebody elses email used next time.
I'm getting loads from a mob supposedly running a conference about Python
or something. Quite obviously coming from spoofed addresses, in much the
same way as Fake Virgin ones come from named people at different isps, and
the latest ones seem to be asking all my accounts to confirm I joined bbc
sounds, and yet another saying that to leaving the EU if I want to continue
watching tv, I need to pay them an extra Licence. Erm I don't think so. The
spoof address appears to be in France. The bbc sounds one is a little odd as
I did not press any key, but it then sent a welcome email looking genuine.
Normally if you do not send a reply from the email it will discard the log
in. It appears to have been sent formatted for an Apple device, but never
specifically mentions it.
Brian

--

--:
This newsgroup posting comes to you directly from...
The Sofa of Brian Gaff...
briang1@blueyonder.co.uk
Blind user, so no pictures please
Note this Signature is meaningless.!
"Jack Harry Teesdale" <noreply492000-medic@yahoo.co.uk> wrote in message
news:ttlkri$3m4la$2@dont-email.me...
>I have been getting a lot of e-mail spam from European educational
>establishment domains in Belgium and Portugal such as 'scheuler.kae.be', it
>seems a former e-mail contact of mine must have been hacked as their name
>is quoted as the 'sender' but not the actual source of the e-mails
>
> Although they are successfully diverted to my spam/junk folders they
> persist in coming.
>
> Does anyone have any sensible suggestions as to how I can stop these?

These days they don't even have to hack. So many people seem to include a
list of email addresses in their emails, just somebody looking over your
shoulder in a cafedddddd

They just take a pic of the laptop screen at the right time.
Brian
--

--:
This newsgroup posting comes to you directly from...
The Sofa of Brian Gaff...
briang1@blueyonder.co.uk
Blind user, so no pictures please
Note this Signature is meaningless.!
"Jack Harry Teesdale" <noreply492000-medic@yahoo.co.uk> wrote in message
news:ttlo8q$3mpeh$1@dont-email.me...
> On 28/02/2023 20:14, Andy Burns wrote:
>> Jack Harry Teesdale wrote:
>>
>>> I have been getting a lot of e-mail spam from European educational
>>> establishment domains in Belgium and Portugal such as 'scheuler.kae.be',
>>> it seems a former e-mail contact of mine must have been hacked as their
>>> name is quoted as the 'sender' but not the actual source of the e-mails
>>>
>>> Although they are successfully diverted to my spam/junk folders they
>>> persist in coming.
>>>
>>> Does anyone have any sensible suggestions as to how I can stop these?
>>
>> This sort of thing happens in waves, you can't really stop it, but sounds
>> like you have at least two strings to match on in your kill file?
>>
> Thanks, I have already done as you've said and set up a number of kill
> files.

On 28/02/2023 23:28, John Rumm wrote:
> On 28/02/2023 19:31, Jack Harry Teesdale wrote:
>> I have been getting a lot of e-mail spam from European educational
>> establishment domains in Belgium and Portugal such as
>> 'scheuler.kae.be', it seems a former e-mail contact of mine must have
>> been hacked as their name is quoted as the 'sender' but not the actual
>> source of the e-mails
>>
>> Although they are successfully diverted to my spam/junk folders they
>> persist in coming.
>>
>> Does anyone have any sensible suggestions as to how I can stop these?
>
> Are they coming from the actual mailbox of the hacked account - or just
> claiming to be from that address? If the former, you might have some
> scope for contacting the provider.
>
No not from the actual mailbox of the hacked account although claiming
to be so. The 'real' e-mail addy is different and varies.

On 01/03/2023 09:58, Jack Harry Teesdale wrote:
> On 28/02/2023 23:28, John Rumm wrote:
>> On 28/02/2023 19:31, Jack Harry Teesdale wrote:
>>> I have been getting a lot of e-mail spam from European educational
>>> establishment domains in Belgium and Portugal such as
>>> 'scheuler.kae.be', it seems a former e-mail contact of mine must have
>>> been hacked as their name is quoted as the 'sender' but not the
>>> actual source of the e-mails
>>>
>>> Although they are successfully diverted to my spam/junk folders they
>>> persist in coming.
>>>
>>> Does anyone have any sensible suggestions as to how I can stop these?
>>
>> Are they coming from the actual mailbox of the hacked account - or
>> just claiming to be from that address? If the former, you might have
>> some scope for contacting the provider.
>>
> No not from the actual mailbox of the hacked account although claiming
> to be so. The 'real' e-mail addy is different and varies.

So the best you can probably do is a filter that deletes mails from that
address on receipt. You can add a bit of sophistication by matching on
something else in the header like an organisation or the type of mail
client, so that you won't delete any from the real owner of the account
if they ever mailed you.

So say:

"message from" "contains" <users-email-address>
AND
"Reply-to" "doesn't contain" <users-email-address>
THEN
Delete message

--
Cheers,

John.

/=================================================================\
| Internode Ltd - http://www.internode.co.uk |
|-----------------------------------------------------------------|
| John Rumm - john(at)internode(dot)co(dot)uk |
\=================================================================/

On 02/03/2023 00:24, John Rumm wrote:
> On 01/03/2023 09:58, Jack Harry Teesdale wrote:
>> On 28/02/2023 23:28, John Rumm wrote:
>>> On 28/02/2023 19:31, Jack Harry Teesdale wrote:
>>>> I have been getting a lot of e-mail spam from European educational
>>>> establishment domains in Belgium and Portugal such as
>>>> 'scheuler.kae.be', it seems a former e-mail contact of mine must
>>>> have been hacked as their name is quoted as the 'sender' but not the
>>>> actual source of the e-mails
>>>>
>>>> Although they are successfully diverted to my spam/junk folders they
>>>> persist in coming.
>>>>
>>>> Does anyone have any sensible suggestions as to how I can stop these?
>>>
>>> Are they coming from the actual mailbox of the hacked account - or
>>> just claiming to be from that address? If the former, you might have
>>> some scope for contacting the provider.
>>>
>> No not from the actual mailbox of the hacked account although claiming
>> to be so. The 'real' e-mail addy is different and varies.
>
> So the best you can probably do is a filter that deletes mails from that
> address on receipt. You can add a bit of sophistication by matching on
> something else in the header like an organisation or the type of mail
> client, so that you won't delete any from the real owner of the account
> if they ever mailed you.
>
> So say:
>
> "message from" "contains" <users-email-address>
> AND
> "Reply-to" "doesn't contain" <users-email-address>
> THEN
> Delete message
>
>
>
Thanks John I have already done that but they keep coming, albeit now
they end up in my Trash.

On Wed, 1 Mar 2023 08:24:37 -0000
"Brian Gaff" <brian1gaff@gmail.com> wrote:

> The bbc sounds one is a little odd as
> I did not press any key, but it then sent a welcome email looking
> genuine. Normally if you do not send a reply from the email it will
> discard the log in.

They commonly put an image in the HTML email message with a unique ID
that's linked to your email address, so simply opening the message
renders the HTML and their server records that your address is active.
That's why mail clients often default to rendering messages without
images, with the option to enable them once you've decided the message
is legitimate. There's also the "read receipt" flag that may be used
for the same purpose, although I don't think this gets as much use;
mail clients normally ask you if the receipt should be sent.