It has come to our attention that some spammer(s) from time to time launch e-mail campaigns that look like messages sent by GMS.
Spoof email is totally beyond our control, and we regret very much that we cannot stop it any more than those who get those emails.
BE IT HERE BY KNOWN.
We have nothing to do with such spam, which is a misrepresentation of our good name. We do not send, and have never sent, spam email of any sort. We strongly oppose the act of "spamming" or sending unsolicited commercial email (UCE). We do not advertize via email to anyone.
If you have received such spam email we are sorry, but emphasize that it was nothing to do with us and was beyond our control. We only keep our customers current via newsletter and email on events and new services they have a need to know and nothing more.
What is E-mail Spoofing? (Faking or Forging or Phishing)
"E-mail Spoofing" is the latest nasty trend in spam, it is the practice used by many spammers to falsify the header information in their e-mail advertisements. It is unfortunate but many spammers use listed corporations that have well known names as their header spoof. Most spammers are out to make a buck using the good names of the corporations they spoof.
By changing the header information someone can make the email appear to come from whoever they choose. Some spammers even go as far as include the one of the spoofed companies voice mail phone numbers to make it seem legit. We as well as other very respected corporations and private companies from time to time become the target of spammers as well as from time to time we are spoofed.
Hackers are now routinely stealing the e-mail or Web site identities of many people on the Web, and using them to send millions of pieces of junk advertising or offending e-mails. The average person on the Internet doesn't yet understand what's happening here, and many legitimate companies are obviously being victimized.
How You Can Help - Handling Spam Spoofers
If you ever receive such spam-mails that look like messages sent by GMS, please do this:
• Send the original spoofed e-mail as an attachment. (See the "send" menu of your e-mail program)
Sending the e-mail as an attachment is the best way to preserve the "header information," which makes it easier for us to trace the true origin of the forgery.
• OR
If you cannot send the forged e-mail as an attachment, forward the e-mail, and include as much of the header information as you are able to maintain.
The headers we need are well labeled and look something like this: X-Sender: someone@domain.com X-Sender-IP: [10.1.2.3] X-Date: Tue, 18 Apr 2003 20:12:06 +0000 (UTC) X-Recipient: you@domain.com X-OUID: 1
To find the header information, configure your e-mail program to show All Headers (this varies from program to program).
For Internet Explorer you can do this: - right-click the unopened e-mail in your inbox, - and then click "Options" to open the window that includes "Internet Headers."
To track the actual sender of a particular message, we need this "extended headers" information.
If you simply forward an e-mail message to someone, these headers will be lost, so whenever you are reporting spam be sure to cut-and-paste the message header from the spam message and send it in the body copy of your e-mail message.
• Please understand that we will not be able to respond to all of the e-mail reports we receive.
2. Report spoofed e-mails to your ISP and notify them that someone has stolen our e-mail identify.
Be sure to cut-and-paste the message header from the spam message and send it in the body copy of your e-mail message, as described above (1).
3. Never respond to requests for personal information that may be contained in the forged e-mail. We never ask for personal information via email.
4. Please don't do anything which might result in GMS being wrongly blacklisted as a spammer.
Thank you for your help and understanding, GMS Support Interactive
General email spoofing information
CERT Coordination Center - Spoofed/Forged Email http://www.cert.org/tech_tips/email_spoofing.html This document provides a general overview of email spoofing and the problems that can result from it. It includes information that will help you respond to such activity.
Reading Email Headers: StopSpam.org http://www.stopspam.org/email/headers.html All About Email Headers. This document is intended to provide a comprehensive introduction to the behavior of email headers. It is primarily intended to help victims of unsolicited email ("email spam") attempting to determine the real source of the (generally forged) email that plagues them; it should also help in attempts to understand any other forged email.
Figuring out fake E-Mail: Deciphering fake email or posting? http://www.mailsbroadcast.com/email.bolts&nuts/deciphering.fake.email.htm The information provided here, describes how to find out where a fake post or e-mail originated from, decipher which machine it came from and who (generally or specifically) you should contact.
UXN Tracing Spam / Spam Complaints Assistant: http://combat.uxn.com/tracing.html A one page easy explanation of how to read the "Received:" lines in the email header to trace the spam and who to complain to. With integrated IP Address Lookup.
