Comment Re:Spoofing from address? (Score 1) 17
Nothing is being spoofed.
Typically, the spammers find a support ticket submission page, or a bug tracker or some other quasi-public system. Then they open a ticket or report a bug using YOUR email address and a name like "YOURNAME, we are going to charge your credit card $587.16 for Norton Antivirus if you don't call XXX or email YYY in the next 24 hours"
YOU then get an email from the ticketing system or bug tracker or whatever it is. This email contains the spammer's message, plus whatever is in the stock "your report is now in our system" email template the system is using.
This was all over Zendesk a few months ago. I was getting them from seemingly every company on the planet that had outsourced ticket tracking to their system.