Live data from Hacker News

Ask HN: What's happening with Gmail spam filtering?

news.ycombinator.com

31–40 of 150 posts

Re: Ask HN: What's happening with Gmail spam filtering?

#31
post #10

To offer a singular data point, contrary to other posters here, I am not seeing this at all, and I pretty actively use my two Gmail addresses which have been active since 2005. My spam inbox regularly gets correctly categorized spam, and important emails still correctly land in my inbox.

Same here - I've had 6 different gmail accounts for years and years, and the frequency with which spam gets through is maybe 1-2 emails a year, if even that.

Re: Ask HN: What's happening with Gmail spam filtering?

#32
post #29

I constantly receive the same kind of gmail spam: there's a package for me. Half a year already, 3-4 a day, from random addresses like rp.6sgzBKV9UH@mail.4t2d3uxkxo.com / over corpegg.com whatever that is.

Do the emails contain links? 90% of spam filtering is checking if there's a link in the email. Spamming is easy if you don't need to include links, and the package spam often requests you call a phone number, which makes inboxing it trivial.

Re: Ask HN: What's happening with Gmail spam filtering?

#33

The crazy thing is that on the last year I found emails from Google, and Apple, in the spam folder. Apple's were invoices... of which I get a couple a month (iTunes purchases, subscriptions). Google's I think were announcements for services, etc. tied to a Workspaces work account. I can't think of no actions I did (in terms of identifying email as spam) that could suggest I might consider emails from Google or Apple,…

Yep. Same on Outlook (née Hotmail). Announcements from Microsoft in spam.

Re: Ask HN: What's happening with Gmail spam filtering?

#34

For me, it just goes in cycles. For a couple of weeks, I'll get these spam emails from "Dick's Sporting Goods" telling me I won a chance at a Yeti cooler or something like that. These emails will make it through gmail's filter for a while, then they catch them, then they figure out how to get through again. That particular set of emails seems to be the only spam that ever makes it through the filter, but the cycle ha…

I'm currently in the "Dick's Sporting Goods" cycle....a few months ago I was in the "Norton Renewal" cycle. In between was 5-6 weeks of silence.

Re: Ask HN: What's happening with Gmail spam filtering?

#35
post #10

To offer a singular data point, contrary to other posters here, I am not seeing this at all, and I pretty actively use my two Gmail addresses which have been active since 2005. My spam inbox regularly gets correctly categorized spam, and important emails still correctly land in my inbox.

Same. I haven't gotten any spam in my inbox in years. The spammiest mails I get are mailing lists that some business subscribed me to.

Re: Ask HN: What's happening with Gmail spam filtering?

#36
The spam is quite likely coming via Google itself.

Google's mail servers have been compromised for several weeks now. It's commonly being used for infected crypto spam (all those "new traderbot" emails with the attached infected PDF, for example). I'm not yet sure if these are just compromised GMail accounts, or if the mail servers themselves have been compromised. There seem to be some reports on AbuseIPDB of intrusion attempts coming directly from Google's mail servers.

I've tried reporting it to Google (eg via SpamCop), and Google declines to receive reports. I have been reporting it through AbuseIPDB as well. Here is one Google mail server that has had over 300 abuse reports:

https://www.abuseipdb.com/check/209.85.167.48

There are many more, and I linked to a few more when I posted about it here on HN over a month ago:

https://news.ycombinator.com/item?id=32434810

Re: Ask HN: What's happening with Gmail spam filtering?

#37
Check the raw email body and see if it consists of multiple encoded MIME parts. I'm seeing some spammers sending the message body as one part of innocuous content but then a different part is displayed when you open the email. I'm guessing this confuses the spam filter enough to let it through.

Re: Ask HN: What's happening with Gmail spam filtering?

#38

The spam is quite likely coming via Google itself. Google's mail servers have been compromised for several weeks now. It's commonly being used for infected crypto spam (all those "new traderbot" emails with the attached infected PDF, for example). I'm not yet sure if these are just compromised GMail accounts, or if the mail servers themselves have been compromised. There seem to be some reports on AbuseIPDB of intrus…

Unfortunately every major provider has this happen. Google and Microsoft especially since they have their productivity platforms that send mail through the same infrastructure as their free email services. They also have to deal with more problems through compromised education accounts - students aren't that great at protecting their school credentials, and some businesses aren't much better.
Post reply on HN