FYI/Heads up, I /just/ received what looks like a phishing attempt for information about Open Source PBX usage. It says it comes from Digium but all the links (including the one for digium.com) point elsewhere. Rod --
On Wed, Nov 5, 2008 at 10:26 AM, Roderick A. Anderson <raanders at acm.org>wrote:> FYI/Heads up, > > I /just/ received what looks like a phishing attempt for information > about Open Source PBX usage. It says it comes from Digium but all the > links (including the one for digium.com) point elsewhere. > > > Rod > -- >I doubt it is a "Phishing Attempt", there are many free (or paid) survey websites that make creating surveys extremely easy, rather than coding and hosting the survey yourself. I see it all the time. Anyways, it asks for nothing but usage statistics, so I am not sure what they are "Phishing" for? Obviously, they already have your email, I guess they could get your IP and usage stats...... Harmless in my opinion, I am 99.9% sure it is from Diigium but even if not, I would answer the same questions if it were a survey from anyone in the community. I just would not like the direct delivery method rather than the list. Thanks, Steve Totaro -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20081105/2bf163a8/attachment.htm
Hi, I think it's just their stupid partners for gathering usage data (elq something). Same thing is shown when you try to download something from digium.com. Alex On Nov 5, 2008, at 5:26 PM, Roderick A. Anderson wrote:> FYI/Heads up, > > I /just/ received what looks like a phishing attempt for information > about Open Source PBX usage. It says it comes from Digium but all the > links (including the one for digium.com) point elsewhere. > > > Rod > -- > > _______________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users
Steve Totaro wrote:> > > On Wed, Nov 5, 2008 at 10:26 AM, Roderick A. Anderson <raanders at acm.org > <mailto:raanders at acm.org>> wrote: > > FYI/Heads up, > > I /just/ received what looks like a phishing attempt for information > about Open Source PBX usage. It says it comes from Digium but all the > links (including the one for digium.com <http://digium.com>) point > elsewhere. > > > Rod > -- > > > I doubt it is a "Phishing Attempt", there are many free (or paid) survey > websites that make creating surveys extremely easy, rather than coding > and hosting the survey yourself. I see it all the time.I was thinking the same except the link to digium.com was not to http://www.digium.com.> Anyways, it asks for nothing but usage statistics, so I am not sure what > they are "Phishing" for? Obviously, they already have your email, I > guess they could get your IP and usage stats...... Harmless in my > opinion, I am 99.9% sure it is from Diigium but even if not, I would > answer the same questions if it were a survey from anyone in the > community. I just would not like the direct delivery method rather than > the list.If this is all it is then fine, but like you I think the direct delivery method sucks. I get far to many of these type of emails and most of them phishing trips. Takes time to check out the ones that look legitimate, like this one from Digium. So it was probably more a gripe posting that hopefully someone from Digium will notice and do a bit more of a think before doing/allowing it to happen again. Rod --> Thanks, > Steve Totaro > > > ------------------------------------------------------------------------ > > _______________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users
On Nov 5, 2008, at 7:26 AM, Roderick A. Anderson wrote:> FYI/Heads up, > > I /just/ received what looks like a phishing attempt for information > about Open Source PBX usage. It says it comes from Digium but all the > links (including the one for digium.com) point elsewhere. > > > RodRod - It's a "legitimate" mail from Digium. We're trying to use the tools that others have built instead of building our own systems, so this particular company that we've chosen for research collection has their own hosts outside of the Digium DNS and server structure. Myself, I'm a big fan of Google Docs but they do have some shortcomings (like also not being in our DNS or server structure) and not everyone uses the same tools here at Digium. "There's more than one way to do it", as goes one of the more famous Asterisk sayings. Sorry if that message you received seemed unusual or unexpected because of the URL format. You can opt-out at the bottom of the emailings in the future if you wish, though some of the data that we're collecting will be tangentally useful in promoting OSS Asterisk in various forms. And to proactively answer the next question that may come up from someone: We've _never_ used the asterisk-* mailing list for any direct marketing email input lists. In other words: whatever email address you've used for the asterisk-* lists is private, and Digium never uses those for marketing purposes. JT --- John Todd jtodd at digium.com +1-256-428-6083 Asterisk Open Source Community Director
Wouldn't these headers indicate the email was legit? Took about 10 seconds to extract and review them as authentic email from digium. -Eric Received: from mail.email.digium.com (mail.email.digium.com [66.48.80.65]) by mx.google.com with ESMTP id 20si1077106agb.38.2008.11.05.07.12.16; Wed, 05 Nov 2008 07:12:16 -0800 (PST) Received-SPF: pass (google.com: domain of webannounce at email.digium.com designates 66.48.80.65 as permitted sender) client-ip=66.48.80.65; Authentication-Results: mx.google.com; spf=pass (google.com: domain of webannounce at email.digium.com designates 66.48.80.65 as permitted sender) smtp.mail=webannounce at email.digium.com ReturnPath: "Digium"<webannounce at email.digium.com> X-Mailer: SMTP On Wed, Nov 5, 2008 at 7:26 AM, Roderick A. Anderson <raanders at acm.org>wrote:> FYI/Heads up, > > I /just/ received what looks like a phishing attempt for information > about Open Source PBX usage. It says it comes from Digium but all the > links (including the one for digium.com) point elsewhere. > > > Rod > -- > > _______________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >-------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20081105/201e3009/attachment.htm