Groups > alt.comp.software.thunderbird > #20471

Re: Fake email

From	Mike Easter <MikeE@ster.invalid>
Newsgroups	alt.comp.software.thunderbird
Subject	Re: Fake email
Date	2026-05-15 08:42 -0700
Message-ID	<n6ot6iFqj89U2@mid.individual.net> (permalink)
References	<10u78tb$8n14$1@dont-email.me>

Show all headers | View raw

Jim wrote:
> I received an email today from a friend. The sender address is the one I 
> have for him.
> When I opened it, I knew that it was a fake from the content and I have 
> had similar before - 'can you buy an Apple card for me - friend with 
> cancer etc, etc.'
> 
> I did not REPLY to that email, but sent a new message to the address I 
> thought I knew. The reply came back from a different address with more 
> crap about sending the card and how much it would cost.

The first part often happens when someone's address book gets scraped.

The second part indicates that along w/ his addressbook, his email 
account has been hacked/cracked.

It might be of some interest to parse the headers of the first mail; 
actually parse both of them.

-- 
Mike Easter

Back to alt.comp.software.thunderbird | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Fake email Jim the Geordie <jim@geordieland.com> - 2026-05-15 15:00 +0100
  Re: Fake email Marco Moock <mm@dorfdsl.de> - 2026-05-15 17:32 +0200
    Re: Fake email "Adam H. Kerman" <ahk@chinet.com> - 2026-05-15 15:55 +0000
  Re: Fake email Mike Easter <MikeE@ster.invalid> - 2026-05-15 08:42 -0700
  Re: Fake email "David E. Ross" <nobody@nowhere.invalid> - 2026-05-15 09:16 -0700
  Re: Fake email Jeff Layman <Jeff@invalid.invalid> - 2026-05-15 17:27 +0100
    Re: Fake email "Adam H. Kerman" <ahk@chinet.com> - 2026-05-15 17:09 +0000
      Re: Fake email "s|b" <me@privacy.invalid> - 2026-05-15 20:04 +0200
        Re: Fake email "Adam H. Kerman" <ahk@chinet.com> - 2026-05-15 20:02 +0000
    Re: Fake email "J. P. Gilliver" <G6JPG@255soft.uk> - 2026-05-15 18:13 +0100
    Re: Fake email "s|b" <me@privacy.invalid> - 2026-05-15 20:14 +0200
      Re: Fake email Retirednoguilt <HapilyRetired@fakeaddress.invalid> - 2026-05-15 15:44 -0400
      Re: Fake email "J. P. Gilliver" <G6JPG@255soft.uk> - 2026-05-15 21:08 +0100
        Re: Fake email "s|b" <me@privacy.invalid> - 2026-05-17 15:33 +0200
  Re: Fake email "J. P. Gilliver" <G6JPG@255soft.uk> - 2026-05-15 18:09 +0100
  Re: Fake email Retirednoguilt <HapilyRetired@fakeaddress.invalid> - 2026-05-15 13:18 -0400
    Re: Fake email Jim the Geordie <jim@geordieland.com> - 2026-05-15 18:31 +0100
      Re: Fake email VanguardLH <V@nguard.LH> - 2026-05-15 14:11 -0500
        Re: Fake email "Carlos E.R." <robin_listas@es.invalid> - 2026-05-15 21:57 +0200
          Re: Fake email VanguardLH <V@nguard.LH> - 2026-05-15 22:13 -0500
            Re: Fake email "Carlos E.R." <robin_listas@es.invalid> - 2026-05-16 09:25 +0200
              Re: Fake email Richmond <dnomhcir@gmx.com> - 2026-05-16 11:15 +0100
                Re: Fake email "Adam H. Kerman" <ahk@chinet.com> - 2026-05-16 14:06 +0000
                Re: Fake email The Real Bev <bashley101@gmail.com> - 2026-05-16 11:18 -0700
                Re: Fake email "Adam H. Kerman" <ahk@chinet.com> - 2026-05-16 18:32 +0000
  Re: Fake email Dave W <davewi11@yahoo.co.uk> - 2026-05-16 18:28 +0100

csiph-web