Full Disclosure mailing list archives

RE: Infections


From: "DAN MORRILL" <dan_20407 () msn com>
Date: Tue, 27 Jan 2004 16:00:34 +0000

Too funny,

Blocked 9 messages from the list last night for being infected. Irony really, since this is a security board. (Ok please flame on, I know I just pissed someone off).





r/
Dan





From: "Jos Osborne" <Jos () meltemi co uk>
To: <full-disclosure () lists netsys com>
Subject: [Full-disclosure] Infections
Date: Tue, 27 Jan 2004 14:31:46 -0000

Okay - I think someone on here's infected. Within a couple of hours of my address first appearing on this list, I got the following:


----------------------------------------------

Undeliverable: Delivery Status Notification (Failure)

Your message did not reach some or all of the intended recipients.

      Subject:  Delivery Status Notification (Failure)
      Sent:     27/01/04 14:17

The following recipient(s) could not be reached:

      leo () twkempton co uk on 27/01/04 14:30
The e-mail account does not exist at the organization this message was sent to. Check the e-mail address, or contact the recipient directly to find out the correct address.
            <kempton.twkempton.co.uk #5.1.1>

      mailbox () twkempton co uk on 27/01/04 14:30
The e-mail account does not exist at the organization this message was sent to. Check the e-mail address, or contact the recipient directly to find out the correct address.
            <kempton.twkempton.co.uk #5.1.1>

----------------------------------------------


My system clock was reading 14:27 at the time I recieved this - an ever so slight discrepancy... From the reports I've been getting from users it looks like the virus is spoofing the sent address with a randomly chosen address from the host's address list.

Jos

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_________________________________________________________________
Check out the coupons and bargains on MSN Offers! http://shopping.msn.com/softcontent/softcontent.aspx?scmId=1418

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: