<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Anyone who got that message please reply to me directly - I would
sure like to get to the source of this.<br>
It's identified by the From and XML contents - not by the subject.<br>
<br>
The only reference back to me is in the headers and yet I never
saw the message with XML attachments.<br>
I keep folders of bogus messages and all messages in an archive or
(that recent) junk or spam folders.<br>
<br>
AND if you goggle that email antwon.bechtelar -- it shows up in a
PHP git class that generates fake names for testing.<br>
<br>
I removed the headers Mik posted - you can see the full email down
the list.</p>
<p>Lets keep more this off the list and I'll report how many saw it
and if anything comes up.<br>
<br>
As for now, Mik and Stephen Michel saw it - with different bodies.<br>
This leads me to believe someone has just taken and hand hacked
some of the HT archive -- date 2/5 on both.<br>
And thanks Mik for the full headers - that is what is needed to
make any sense of this.<br>
</p>
<p>Stay well - Rich<br>
</p>
<div class="moz-cite-prefix">On 2/18/2021 3:50 PM, Michael Muller
via Hidden-discuss wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0d5520c4-a688-2fa9-646b-b5c78e1e6655@montaguewebworks.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p><font face="Calibri">Did everyone get this email back on Feb 5
from "Stephen <a class="moz-txt-link-rfc2396E"
href="mailto:antwon.bechtelar@imperfecciones.inatural24.com"
moz-do-not-send="true"><antwon.bechtelar@imperfecciones.inatural24.com></a>"</font></p>
<p><font face="Calibri">It had an XLS file attached and the
emailer asked me to sign it and email it back. Yeah, right..
Looks like someone's account has been hacked.</font></p>
<p><font face="Calibri">Full headers, below. Original email below
that.<br>
</font></p>
<p><font face="Calibri">Mik</font></p>
<br>
</blockquote>
<pre class="moz-signature" cols="72">--
Rich Roth
CEO TnR Global
Bio and personal blog: <a class="moz-txt-link-freetext" href="http://rizbang.com">http://rizbang.com</a>
Building the really big sites: <a class="moz-txt-link-freetext" href="http://www.tnrglobal.com">http://www.tnrglobal.com</a>
Small/Soho business in the PV: <a class="moz-txt-link-freetext" href="http://www.hidden-tech.net">http://www.hidden-tech.net</a>
Places to meet for business: <a class="moz-txt-link-freetext" href="http://www.meetmewhere.com">http://www.meetmewhere.com</a>
And for Arts and relaxation:
<a class="moz-txt-link-freetext" href="http://TarotMuertos.com">http://TarotMuertos.com</a> - Artistic Tarot Deck
<a class="moz-txt-link-freetext" href="http://www.welovemuseums.com">http://www.welovemuseums.com</a>
<a class="moz-txt-link-freetext" href="http://www.artonmytv.com/">http://www.artonmytv.com/</a>
Helping move the world: <a class="moz-txt-link-freetext" href="http://www.earththrives.com">http://www.earththrives.com</a></pre>
</body>
</html>