Yesterday I saw a series spam emails from Necurs apparently attempting to collect replies to [email protected]. Although that campaign is continuing today, a new spam run with similar characteristics has started this morning. For example:
From: jKX Soto [ingmanz@redacted]Reply-To: jKX Soto [[email protected]]Date: 19 July 2017 at 06:43Subject: CQJPhDYNOXTC
Article Link: http://blog.dynamoo.com/2017/07/necurs-oddity-ii-avto111222bigmirnet.html