HN Explorer

Tell HN: Beware of Dropbox Upgrade Mail

1 points by FractalNerve ↗ HN
Hi,

If you just received a localized and authentic looking email from dropbox (oldversion@dropboxmail.com) informing you that you're running an old version of dropbox on your computer, including the name of your computer in it, DO NOT OPEN IT!

It's probably the deployment of a botnet, some malware or similar.

Headers:

     Return-Path: <oldversion@dropboxmail.com>
     X-Greylist: delayed 337 seconds by postgrey-1.34 at dd32100; Mon, 18 Aug 2014 02:40:55 CEST
     X-policyd-weight: using cached result; rate: -7
     Received: from sjd-rb12-12d.dropboxmail.com (sjd-rb12-12d.sjc.dropbox.com [108.160.166.120])
	for <redacted>; Mon, 18 Aug 2014 02:40:55 +0200 (CEST)
     Received: from snt-ra10-20c.sjc.dropbox.com (snt-ra10-20c.sjc.dropbox.com [10.12.10.187])
	by sjd-rb12-12d.dropboxmail.com (Postfix) with ESMTP id F124F2008DD8A
	for <redacted>; Mon, 18 Aug 2014 00:35:15 +0000 (UTC)
     MIME-Version: 1.0
     From: Dropbox <oldversion@dropboxmail.com>
Thanks and have a nice day!

4 comments

[ 3.0 ms ] story [ 23.2 ms ] thread
greenyoda
The mail headers seem authentic. dropboxmail.com is registered to Dropbox, Inc.[1]

Maybe you should contact Dropbox to confirm whether that e-mail is legitimate before telling everyone that it's not?

[1] http://www.whois.com/whois/dropboxmail.com