If you notice the from address you will see it's not coming from the Koha list at all It's just someone crafting an email to look like it was. There is pretty much nothing we can do about that. It's a pretty standard example of a phishing attack, craft an email that at first glance looks to be coming from a legit source. Chris On Thu, 27 Sep 2018, 00:51 Eric Bégin, <eric.begin@inlibro.com> wrote:
Hi,
I guess I'm not the only who receive the email below which attachment is infected.
It seems that Koha's mailing list has been "infiltrated" with spam bots.
Anybody has a clue how to fix this ?
Best regards,
Eric
-------- Forwarded Message -------- Subject: Koha Available Invoice 0E787866 from 26 September Date: Wed, 26 Sep 2018 03:22:41 -0300 From: Koha <"koha-bounces@lists.katipo.co.nzasistentegerencia"@colboletos.com> To: eric.begin@inLibro.com
Good Morning,
Please be advised that that your order, detailed in the attached invoice, shipped. We thank you and appreciate your business. Attached is your invoice from Koha.
Sincerely,
------ Koha koha-bounces@lists.katipo.co.nz
------
_______________________________________________ Koha mailing list http://koha-community.org Koha@lists.katipo.co.nz https://lists.katipo.co.nz/mailman/listinfo/koha