Malicious actors are spoofing staff and member email addresses to send email with potentially unsafe links to OASIS mail lists. These spoofed sender emails are sometimes good enough to get through the list server controls which allow messages from only subscribers and administrators.
The vast majority of the attempts are prevented by our current security regime, but some are getting through.
The degree to which you see these messages and/or are warned about them depends on how thy interact with your enterprise and client security environment.
What are some signs of a spam message?
The emails are usually vague and encourage you to click a link. Text reads "Hey, I found this... or My friends found this interesting.... Hey, check this out..."
The sender shown in your mail client often doesn't match the email address being spoofed and there may be many names in the recipient list.
What do I do when I receive one of these messages?
Most importantly - DO NOT click the link provided in suspicious emails. Delete the email. Nothing good will happen if you click the provided link.
You need not forward or report these messages to OASIS staff. We are subscribed to all lists and see these messages when you do.
Is something being done to fix this?
We are working with our service providers to increase the efficiency of the spam filtering ahead of the list servers to improve the filtering of spam while being mindful of the problems of false positives.
IF you think you've sent a message to an OASIS mail list and it wasn't distributed, please do report that to me as a sign of a false positive in the spam filter.
Thanks for your patience with this annoying problem as we work for an improved situation.