[ale] New style of email attack?

[Bob Toxen]

On Wed, May 04, 2022 at 01:35:10PM -0500, Joey Kelly via Ale wrote:
> On Tuesday, May 3, 2022 7:52:27 PM CDT Neal Rhodes via Ale wrote:
> > We've seen two instances of what might look like a new flavor of
> > phishing attack.

> spearphishing
Of course spearphishing but the issue is how did the hacker form the
connection between Neal and the small business in Canada?

Bob

> > My wife got an email ostensibly from a local HVAC contractor we have
> > used in the past, asking her to click on a link to view an RFP and see
> > if she wants to work with them on it.  She knew enough to smell a rat
> > and delete it.
> > 
> > And today, I got an email from a campground in Canada where I made a
> > reservation, asking for me to buy an Amazon Gift card for their family
> > 'cause they had a heart attack, and they will pay me back.   In that
> > case, the reply address was XXXXXXX at outlook.com, when in fact the real
> > emails from the park were sent from XXXXXXX at somethingsomething.ca.
> > 
> > It's like some attack is floating around which just harvests
> > combinations of To/From email addresses, and they blast out various
> > attempts to fool people.
> > 
> > I've only seen a couple like that.  Do I just not get out much?
> > 
> > Is this ringing a bell?
> > 
> > Neal
> -- 
> Joey Kelly
> Minister of the Gospel and Linux Consultant
> http://joeykelly.net
> 504-239-6550