Monday, October 25, 2010

RSA Conference & BankInfoSecurity.com send Illegal Spam Through Lyris

I'm a big fan of BankInfo Security and their sister site GovInfo Security. So, colour me chagrined when I recently was spammed about the RSA Conference in February to my CAUCE.org address (that'd be the Coalition Against unsolicited Commercial Email!) and a brief investigation turns up that ismgcorp.com is behind the spam run.

What makes this noteworthy is two-fold.

The reply-to address, education@ismgcorp.com - bounces, and, the spam ended with this very special line:

"This is a one-time, opt-in mailing. No unsubscribe action necessary."


Wow. If I were an American ISP I might be in a position to sue RSA and ismgcorp.com under CAN SPAM - every email must have an unsubscribe facility contained within.

I've escalated this to contacts at both Lyris (elabs6.com) and BankInfo Security. Shame on them, and the RSA conference for allowing this to happen.

Here are the headers for those of you curious about this misdeed:
Received: by 10.216.29.149 with SMTP id i21cs81004wea;
       Wed, 20 Oct 2010 07:14:29 -0700 (PDT)
Received: by 10.229.213.200 with SMTP id gx8mr6537880qcb.89.1287584068489;
       Wed, 20 Oct 2010 07:14:28 -0700 (PDT)
Return-Path:
Received: from gal.iecc.com (gal.iecc.com [64.57.183.53])
       by mx.google.com with ESMTP id g11si642719qcq.40.2010.10.20.07.14.27;
       Wed, 20 Oct 2010 07:14:28 -0700 (PDT)
Received: (qmail 82494 invoked by uid 1014); 20 Oct 2010 14:14:27 -0000
Received: (qmail 82492 invoked by uid 1014); 20 Oct 2010 14:14:27 -0000
Delivered-To: MUNGED@cauce.org
Received: (qmail 82489 invoked from network); 20 Oct 2010 14:14:27 -0000
Received: from ismgcorp.com ([208.66.206.171])
 by smtp.abuse.net ([64.57.183.109])
 with ESMTP via TCP id 158093424; 20 Oct 2010 14:14:23 -0000
Return-Path:
Received: from [10.0.6.54] ([10.0.6.54:37460] helo=mail4.elabs6.com)
    by mta04.l3s.lyris.net (envelope-from )
    (ecelerity 2.2.2.45 r(34222M)) with ESMTP
    id 55/A1-25964-A29FEBC4; Wed, 20 Oct 2010 07:14:02 -0700
To:
Subject: =?utf-8?Q?Early=20Bird=20Rate=20Ends=20November=2019=20for=20Premier=20Security=20Conference?=
Date: Wed, 20 Oct 2010 07:14:02 -0700
X-Delivery: Custom 12345965
Reply-To: education@ismgcorp.com
List-Unsubscribe:
Content-description: 05c68c57a6MUNGED@cauce.org!670d!c13a7!bc626d!rynof6.pbz!
X-Complaints-To: abuse@elabs6.com
Message-Id: <20101020141403.05C68C57A626@elabs6.com>
MIME-Version: 1.0

No comments: