Subject:
|
Follow-up: Virus spam from Kim Brodie targetting LUGNET members?
|
Newsgroups:
|
lugnet.admin.general
|
Date:
|
Fri, 11 Apr 2003 15:22:42 GMT
|
Viewed:
|
382 times
|
| |
| |
Heya y'all,
I've been digging back through my spam trap folder in Outlook, and have come
up with the following conclusions:
1. I'm looking at at least two different spam virus attacks. Both are
using open relays in traditional spam style, but:
...Type #1 is obscuring the To: header and seems to prefer open relays
hosted by rr.com (mostly in the American southeast), claims to be from
Microsoft, and has HTML content in the body.
...Type #2 is the Kim Brodie message. I've been getting slightly more of
these than type #1. It has an unobscured (and crowded) To: header, plain
text message body, and uses open relays from all over including Canada,
Australia, Germany, and England. Both types carry the same virus.
2. There is no Kim Brodie. I've also received near-identical emails from
"Screamin Rachel", "Joerg Kuppels", "David Senzig", "Wayne Faulkner", and
"Gino". Gino's was the first, starting in mid-March. (First appearance of
type #1 came the next day.) The weird part is, the To: headers aren't
identical, though all targets appear to be LUGNET regulars. Also, in
several cases, the spamblocks weren't removed from email addresses, so I am
no longer certain the list is hand-assembled.
Here's a funny bit - some of the messages have a sig block (1) claiming to
be Virus Free, certified by by AVG. Before, I thought these banners were
annoying. Now that I've received several infected emails with them, it's
worth at least a chuckle. I have to wonder if the AV vendors realize just
how silly their ad is.
Cheers,
- jsproat
1. *copy-and-pastage*
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/03
|
|
Message is in Reply To:
15 Messages in This Thread:
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|