<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Arial; font-size: 12pt; color: #000000'><span>My understanding however is that mail servers that allow this kind of mail to be routed through them usually get black listed pretty fast so that they end up becoming useless. Good idea to check if in fact the main account concerned has been compromised...<br><br>Regards.<br><br><br><span name="x"></span><br>Ruvan Weerasinghe<br>University of Colombo School of Computing<br>Colombo 00700,<br>Sri Lanka.<br><br>Web: http://www.ucsc.lk<br>Phone: +94112158953; Fax: +94112587239<span name="x"></span><br></span><br><hr id="zwchr"><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;" mce_style="border-left:2px solid #1010ff;margin-left:5px;padding-left:5px;"><b>From: </b>"John F. Sowa" <sowa@bestweb.net><br><b>To: </b>corpora@uib.no<br><b>Sent: </b>Friday, August 19, 2011 7:28:27 AM<br><b>Subject: </b>Re: [Corpora-List] Hacked email accounts (Bill Louw)<br><br>On 8/18/2011 9:05 PM, Alexander Yeh wrote:<br>> I have heard that the "from" field can be faked, at least to a certain<br>> extent.<br><br>That is very easy to fake.<br><br>Just check the "from" field in the spam you receive from companies<br>that look legitimate. They're usually legitimate ids. But the<br>URLs they want you to click are the dangerous ones.<br><br>So if you receive spam with somebody's id in the "from" field,<br>that doesn't necessarily mean that their computer was hijacked.<br>You have to view the hidden headers to see where it really<br>came from.<br><br>It just means that some spammer pasted a legitimate id in the<br>"from" field.<br><br>John<br><br><br>_______________________________________________<br>UNSUBSCRIBE from this page: http://mailman.uib.no/options/corpora<br>Corpora mailing list<br>Corpora@uib.no<br>http://mailman.uib.no/listinfo/corpora<br></blockquote><br></div></body></html>