Security Incidents mailing list archives
New virus?
From: "Rob Shein" <shoten () starpower net>
Date: Fri, 19 Mar 2004 17:44:08 -0500
I'm seeing a lot of something here, and luckily our filters seem to be stopping it with heuristics; it's being quarantined, but it's not identified as any particular virus. I'm seeing emails to people who would normally be getting security-related mails (like SANS bulletins, etc.) and subject lines of such notifications...except that the vulnerabilities listed in the emails are from last year, and in ever case it's a forwarded or replied to email subject (starting with "FW:" or "RE:"). I'm wondering if there's a virus that goes through someone's "Sent Mail" and takes recipients/subjects to produce credible email appearances. Has anyone else been seeing this, and if so, do you have any more information? --------------------------------------------------------------------------- Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, wireless security Protect your network against hackers, viruses, spam and other risks with Astaro Security Linux, the comprehensive security solution that combines six applications in one software solution for ease of use and lower total cost of ownership. Download your free trial at http://www.securityfocus.com/sponsor/Astaro_incidents_040301 ----------------------------------------------------------------------------
Current thread:
- New virus? Rob Shein (Mar 20)
- Re: New virus? James C. Slora Jr. (Mar 22)
- <Possible follow-ups>
- Re: New virus? travis.abrams (Mar 20)