Subject:
|
Re: "Idiot Screensaver to see" and possible email spoofing
|
Newsgroups:
|
lugnet.admin.general
|
Date:
|
Tue, 1 Oct 2002 23:25:31 GMT
|
Viewed:
|
3594 times
|
| |
|
|
In lugnet.admin.general, Lindsay Frederick Braun writes:
>
> Hi all,
>
> I just got an internet connection (however sporadic) back after
> not having one outside my departmental lab terminals for a month,
> and Richard Parsons popped me an email after someone sent him
> the possible virus attachment named in the subject. I don't know
> how this works, if it's something that spoofs one address to another,
> but I know it could not have come from any of my machines because
> they've not been hooked up to the Internet; and I do not use this
> email address anywhere else but LUGNET anymore (I can't send mail
> from it in fact--it points to my primary). But the originator seems
> to be this address or, at least, it is masked this way. There is
> however no way even remotely possible that it could have come from
> my account.
>
> I figured I ought to let Suz et al know that this is out there;
> I'm not sure what it means with respect to other LUGNETters or
> the security of information or if it's just a weird twist dragged
> out of Richard's own phonebook or something.
>
> A great mystery indeed. Any insight is of course welcome, because
> I'm sure I'm a complete dolt on these matters.
Many current virii and worms will spoof addresses with addresses pulled from
the host system. If someone has such a virii (most likely Klez or it's
varients) and has either your e-mail in their address book, or in a cached
webpage, your address may be used to spoof the outgoing e-mails. If
Richard's ISP is co-operative, he may be able to follow the actual path back
that the e-mail took, but the odds are slim - most ISP's aren't co-operative.
HTH
James
|
|
Message is in Reply To:
2 Messages in This Thread:
  
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|
