Email or username:

Password:

Forgot your password?
Eugen Rochko

3 separate e-mail addresses of mine, one personal, one for mastodon.online, one for mastodon.social, received identical e-mails from different people claiming to live in different places that are not California, asking about my process of responding to CCPA requests. New type of spam?

16 comments
Eugen Rochko

The 3 e-mails came from 2 custom e-mail domains that have the same simple template on their homepage, one claiming to be hosted in Paris, France, the other in Moscow, Russia. I'm curious if anyone else has received such e-mails recently.

Antoine-Frédéric

@Gargron I've just read this blog post from the global TL, also I like your new profile pic mastodon.social/@fluffy/107431

FiXato

@Gargron took a while to find it in my history as it was already off my timeline, but see freeradical.zone/@tek/10742493 for a couple of similar reports, along with (AWS) IPs of the emails you could compare.

Eugen Rochko

According to the replies, I am not the only one getting these e-mails, and they don't seem to be specific to Mastodon admins either -- even people running personal blogs are getting them. It seems to be something shady.

Mike Flugennock

@Gargron As I'm sure you know, they could probably be hosted anywhere.

mhoye

@Gargron that’s hitting us at work too. Are they looking “forward to your reply without undue delay and at most within 45 days of this email, as required by Section 1798.130 of the California Civil Code”?

Eugen Rochko

@mhoye Yep, that is them! I wonder what the angle is here.

mhoye

@Gargron my guess is that they’re probing for soft targets. See who responds, overwhelm them with bogus requests, throw a few legitimate ones in the mix and sue for noncompliance when they’re tossed out as spam.

Eugen Rochko

@mhoye I was thinking it might be a kind of legal DDoS

mhoye

@Gargron it’s hard to tell if somebody actually has a scheme these days, or is just trying to make a whole legal process unworkable in the large. Maybe it’s someone looking for targets, maybe it’s someone just wanting to make the whole GDPR/CCPA idea unworkable for everyone?

Aral Balkan

@Gargron Yep, got one for better.fyi this morning.

Go Up