{"id":63378,"date":"2012-11-11T17:24:27","date_gmt":"2012-11-11T15:24:27","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=63378"},"modified":"2012-11-11T17:25:27","modified_gmt":"2012-11-11T15:25:27","slug":"beware-attacks-from-possible-no-spam-list-leak","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/63378-beware-attacks-from-possible-no-spam-list-leak.html","title":{"rendered":"Beware attacks from possible no-spam list leak"},"content":{"rendered":"

Evidence has surfaced that an old copy of the \u201cdo not contact\u201d (DNC) list administered by the Direct Marketing Association of South Africa (DMASA<\/a>) has leaked and is in the hands of cyber-criminals.<\/p>\n

The DNC list is a mechanism that was intended to let people opt-out of receiving any direct marketing material from DMASA members.<\/p>\n

Prior to the first reports of the list leaking, the DMASA hosted a sign-up form on its website that requested information such as a user\u2019s name, South African ID number, telephone numbers, and e-mail address.<\/p>\n

Based on reports from within the industry, the list generated from these sign-ups had around 39,000 registrations and was passed around in a password protected file for marketers to check against their own databases.<\/p>\n

When reports of the leak first surfaced (March-April 2011), the DMASA confirmed that the DNC list was around 39,000 strong, but held firm that there was no evidence that the list had leaked.<\/p>\n

Asked about the leak, COO of the DMASA, Alastair Tempest<\/a> explained that they took action immediately even though they found no \u201cconclusive proof\u201d that the list had leaked.<\/p>\n

\u201cWe did, however, brief our lawyers to take immediate action to protect our IP had the leak been proved,\u201d Tempest said.<\/p>\n

Tempest added that marketers now submit their databases to a secure online system that removes anyone that has indicated they do not want to be contacted.<\/p>\n

Members no longer receive the DNC database with which to manually \u201cclean\u201d their own lists.<\/p>\n

\"Alastair<\/a>

Alastair Tempest<\/p><\/div>\n

Phishing attack after DNC registration<\/h3>\n

The experience of one tech-savvy (and spam-averse) South African suggests that the DMASA\u2019s previous list has not only leaked, but is in the possession of fraudsters trying to illegally gain access to South African bank accounts.<\/p>\n

Jan Gutter used a specially created address on his domain to register on the DMASA\u2019s previous DNC system in 2011, and at the start of October 2012 received an e-mail on that address containing a phishing attack.<\/p>\n

The e-mail purported to be from a bank and contained the following text:<\/p>\n

Dear Customer,<\/p>\n

A debit order for life insurance from Liberty Life was placed on your account this morning and we have been instructed to deduct R1870 from your account today<\/p>\n

If you don\u2019t want to authorized this debit order, please click here to Login [link removed] and follow subsequent steps.<\/p>\n

Regards,
\nSecurity Department<\/p><\/blockquote>\n

Gutter reported the issue to the DMASA, but said that one of their counter-arguments was that the address he used had a three letter username.<\/p>\n

According to Gutter, he doesn\u2019t receive spam on any other three letter e-mail addresses.<\/p>\n

Further requests for comment on the issue yielded only silence from the DMASA.<\/p>\n

Assume the worst<\/h3>\n

It is recommended that users that registered with the DMASA\u2019s DNC list before they switched to the new system be on the lookout for malware and phishing attacks.<\/p>\n

It\u2019s worth noting that since reports of the leak, the DMASA has switched to a system where marketers submit their lists for cleaning rather than giving marketers the DNC database.<\/p>\n

A competing opt-out service run by TrustFabric has used a similar method of pruning direct marketing lists since its inception.<\/p>\n

Earlier this year (April 2012), a TrustFabric spokesperson said that the Consumer Protection Act<\/a> gives South Africans the right to block direct marketing by adding their contact details to an opt-out list.<\/p>\n

\u201cAn official National Opt-out list is yet to be appointed,\u201d TrustFabric said.<\/p>\n

It is understood that nothing much has changed in the last six months, with one industry insider commenting that the interim leadership at the National Consumer Commission is unlikely to make any decisions on the matter.<\/p>\n

Related articles<\/h3>\n

Direct Marketing Association hits back<\/strong><\/a><\/p>\n

Spam opt-out lists: TrustFabric versus DMASA<\/strong><\/a><\/p>\n

DMASA website hosting malware?<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

More evidence has surfaced that the DMASA\u2019s previous \u201cdo not contact\u201d list has leaked<\/p>\n","protected":false},"author":15,"featured_media":57833,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[16470,283,285,1431,1293,16464,16466,35,16468,801,417,10564],"class_list":["post-63378","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-alastair-tempest","tag-consumer-protection-act","tag-cpa","tag-direct-marketing-association","tag-dmasa","tag-dnc","tag-do-not-contact","tag-headline","tag-jan-gutter","tag-malware","tag-phishing","tag-trustfabric"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/63378"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=63378"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/63378\/revisions"}],"predecessor-version":[{"id":63626,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/63378\/revisions\/63626"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/57833"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=63378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=63378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=63378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}