SPAM & Phish Messages from the Club List

Hi FTH, 

We seem to be getting a few SPAM and PHISH messages which look like they're from Members sent around to other Members advertising numerous items such with external links.

I won't post anything here but let me know what you require to analyse or let us know the best way to fix. 

It's coming from members-26@toastmastersclubs.org as well as an individual Members email. 

Cheers,

Toastmaster Stephan Barrie
Member - Croydon Yarra Valley Toastmasters Club 26
District 73

Nothing can original from @toastmastersclub.org as there is no email server here. FTH only forwards those club address email aliases to a members personal address. Anyone in the world (including spammers) can send to a public address (the officer addresses, site admin, contact-##@, etc)

FTH provides tools for each club to manage this;

support.toastmastersclubs.org/doc/item/reducing-spam

However, members-26@toastmastersclubs.org is a private address. Only club members can sent to it from their personal address that is listed in the club site.

If the spam came through this address then it originated from a member's email. The member can check their sent folder to see if they accidentally sent it. Otherwise, they may have a larger security issue with their system or email service.

In our case, it's email spoofing then sending to the list.
I understand password changes would be the most effective in this instance, do you agree?

SB.

All good, after header analysis , I now sort of see the point of origin , so who sent it actually.

I can try to block on this end.

Thanks for your help.

SB.