Uptick in phishing emails directed at Sonic

General discussions and other topics.
4 posts Page 1 of 1
by oddhack » Sat Aug 20, 2022 4:40 pm
I've noticed an increase in phishing scams pretending to be from Sonic, looking for logins / credit card numbers. Don't know if you're aware of this but perhaps some additional filtering can be applied. So far they've been trivially obvious, not even faking the sender domain.
by dane » Sat Aug 20, 2022 5:01 pm
They’ve proven very difficult to block, because unlike most spam they’re very small volume and do not trigger the usual keywords. Our team blocks them as they’re seen, and we block the sites they collect data at, but some still fall for them.
Dane Jasper
by carynorsworthy » Tue Aug 23, 2022 10:04 pm
I've been getting them every day recently as well. "Critical Alert," "A Gentle Reminder," always a phishing link inside.

Here's part of the raw source (header):

Return-Path: <af@citysportsgroupng.com>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on h.spam.sonic.net
X-Spam-Status: No, score=-1.0 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
shortcircuit=no autolearn=disabled version=3.4.6
X-Spam-SNF-Result: 0 (Standard White Rules)
X-Spam-GBUdb-Analysis: 1,, Ugly c=0.372106 p=-0.459459 Source
Received: from a.mx.sonic.net (b.spam-proxy.sonic.net [])
by a.local-delivery (8.14.7/8.14.7) with ESMTP id 27NLhr89030251
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT)
by wayniote » Mon Sep 18, 2023 10:40 am
Hi, When I get these fake Sonic emails (like just this morning) should I notify someone at Sonic and forward the email? Where to? Thanks.
4 posts Page 1 of 1

Who is online

In total there are 3 users online :: 0 registered, 0 hidden and 3 guests (based on users active over the past 5 minutes)
Most users ever online was 999 on Mon May 10, 2021 1:02 am

Users browsing this forum: No registered users and 3 guests