nanog mailing list archives

Re: new nasty email virus trick to bypass scanners


From: "Steven M. Bellovin" <smb () research att com>
Date: Wed, 03 Dec 2003 22:05:10 -0500


In message <6.0.1.1.0.20031203171513.089a6c00@209.112.4.2>, Mike Tancsa writes:


OK, here is a nasty virus trick.  The message gets sent in a password 
protected zip file.  The text of the messages says here are my pics and 
enter in the passwd xxxx to view the archive.

Is this in the wild yet?  Any other details worth looking for?  
Symantec's AV site apparently has nothing on it.

                --Steve Bellovin, http://www.research.att.com/~smb



Current thread: