You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Groach <gr...@yahoo.com> on 2017/10/21 13:49:52 UTC

freshdesk.com and spamassassin mailing list

Yesterday I replied to the spamassassin mailinglist (I actually replied 
twice - with 2 different sender addresses by mistake).

Can anyone tell me why I then received 2x emails from 'freshdesk.com' 
claiming to have created an account for those two addresses (see quote 
below)?

Ive written to this list before and never had such nonsense and want to 
know why my email addresses have ended up with this organisation.

Whats going on?

Help and info welcome.

Thanks



---  begin quote text  ---

Date: Fri, 20 Oct 2017 18:07:46 +0000 (UTC)

From: Catch all <ca...@freshdesk.com>
Reply-To: Catch all <ca...@freshdesk.com>

Subject: Activate your account at Freshdesk Support Portal

Hello Groach,

A new account has been created for you in our Freshdesk Support Portal.

To get started with using our Support Portal, you will have to activate 
your account.

Activation lets you participate in our Forums, browse our Knowledge Base 
and view and respond to your tickets.
__________________________________________________________________________

Activate your account by clicking on the link below.

https://support.freshdesk.com/register/.....
__________________________________________________________________________

If the above URL doesn’t work, copy and paste it into your browser.


In case you are stuck, please write to us for assistance and one of our 
agents would be happy to help.

Regards,

Freshdesk Support

--- end text  ---

Re: freshdesk.com and spamassassin mailing list

Posted by RW <rw...@googlemail.com>.
On Sat, 21 Oct 2017 19:28:14 +0100
Groach wrote:

> Im concerned they have done it deliberately to harvest email
> addresses.

Unlikely. It's very easy to get lists of addresses used to post to
mailing lists without being subscribed. Even if you can't think of an
efficient way of doing it, you can simply subscribe and parse the
emails; there's no need to generate backscatter.


Re: freshdesk.com and spamassassin mailing list

Posted by "Kevin A. McGrail" <ke...@mcgrail.com>.
On 10/21/2017 2:28 PM, Groach wrote:
> Im concerned they have done it deliberately to harvest email addresses.

Perhaps.  I've reached out to the CEO and left a v/m at their west coast 
office.


Re: freshdesk.com and spamassassin mailing list

Posted by Groach <gr...@yahoo.com>.
Im concerned they have done it deliberately to harvest email addresses.



On 21/10/2017 19:20, Kevin A. McGrail wrote:
> On 10/21/2017 11:57 AM, Bill Cole wrote:
>> It would be a good idea to figure out what subscribed address is 
>> causing these and unsubscribe that address (and ban it) from the list. 
>
> Agreed.  I'm just saying it's not time to raise the panic flag :-)
>


Re: freshdesk.com and spamassassin mailing list

Posted by "Kevin A. McGrail" <ke...@mcgrail.com>.
On 10/21/2017 11:57 AM, Bill Cole wrote:
> It would be a good idea to figure out what subscribed address is 
> causing these and unsubscribe that address (and ban it) from the list. 

Agreed.  I'm just saying it's not time to raise the panic flag :-)


Re: freshdesk.com and spamassassin mailing list

Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 21 Oct 2017, at 9:55 (-0400), Kevin A. McGrail wrote:

> I got one as well.  I imagine it's someone using freshdesk for service 
> management.  Just file and forget.  I don't think it's anything too 
> stupid or spam.

I dissent. :)

Subscribing an address that delivers into a SM system that autocreates 
user identities for each new sender address (see also: RequestTracker) 
is at a minimum stupid and has been used as an intentional nuisance 
attack, both targeting the mailing list as a community and the SM 
organization (specifically, abuse desks.)

It would be a good idea to figure out what subscribed address is causing 
these and unsubscribe that address (and ban it) from the list.

-- 
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Currently Seeking Paying Work: https://linkedin.com/in/billcole

Re: freshdesk.com and spamassassin mailing list

Posted by "Kevin A. McGrail" <ke...@mcgrail.com>.
I got one as well.  I imagine it's someone using freshdesk for service management.  Just file and forget.  I don't think it's anything too stupid or spam.
Regards,
KAM

On October 21, 2017 9:49:52 AM EDT, Groach <gr...@yahoo.com> wrote:
>Yesterday I replied to the spamassassin mailinglist (I actually replied
>
>twice - with 2 different sender addresses by mistake).
>
>Can anyone tell me why I then received 2x emails from 'freshdesk.com' 
>claiming to have created an account for those two addresses (see quote 
>below)?
>
>Ive written to this list before and never had such nonsense and want to
>
>know why my email addresses have ended up with this organisation.
>
>Whats going on?
>
>Help and info welcome.
>
>Thanks
>
>
>
>---  begin quote text  ---
>
>Date: Fri, 20 Oct 2017 18:07:46 +0000 (UTC)
>
>From: Catch all <ca...@freshdesk.com>
>Reply-To: Catch all <ca...@freshdesk.com>
>
>Subject: Activate your account at Freshdesk Support Portal
>
>Hello Groach,
>
>A new account has been created for you in our Freshdesk Support Portal.
>
>To get started with using our Support Portal, you will have to activate
>
>your account.
>
>Activation lets you participate in our Forums, browse our Knowledge
>Base 
>and view and respond to your tickets.
>__________________________________________________________________________
>
>Activate your account by clicking on the link below.
>
>https://support.freshdesk.com/register/.....
>__________________________________________________________________________
>
>If the above URL doesn’t work, copy and paste it into your browser.
>
>
>In case you are stuck, please write to us for assistance and one of our
>
>agents would be happy to help.
>
>Regards,
>
>Freshdesk Support
>
>--- end text  ---