full-disclosure - Infections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

From: dan_20407 at msn.com (DAN MORRILL)
Subject: Infections

Too funny,

Blocked 9 messages from the list last night for being infected. Irony 
really, since this is a security board. (Ok please flame on, I know I just 
pissed someone off).





r/
Dan





>From: "Jos Osborne" <Jos@...temi.co.uk>
>To: <full-disclosure@...ts.netsys.com>
>Subject: [Full-Disclosure] Infections
>Date: Tue, 27 Jan 2004 14:31:46 -0000
>
>Okay - I think someone on here's infected. Within a couple of hours of my 
>address first appearing on this list, I got the following:
>
>
>----------------------------------------------
>
>Undeliverable: Delivery Status Notification (Failure)
>
>Your message did not reach some or all of the intended recipients.
>
>       Subject:	Delivery Status Notification (Failure)
>       Sent:	27/01/04 14:17
>
>The following recipient(s) could not be reached:
>
>       leo@...empton.co.uk on 27/01/04 14:30
>             The e-mail account does not exist at the organization this 
>message was sent to.  Check the e-mail address, or contact the recipient 
>directly to find out the correct address.
>             <kempton.twkempton.co.uk #5.1.1>
>
>       mailbox@...empton.co.uk on 27/01/04 14:30
>             The e-mail account does not exist at the organization this 
>message was sent to.  Check the e-mail address, or contact the recipient 
>directly to find out the correct address.
>             <kempton.twkempton.co.uk #5.1.1>
>
>----------------------------------------------
>
>
>My system clock was reading 14:27 at the time I recieved this - an ever so 
>slight discrepancy...
>From the reports I've been getting from users it looks like the virus is 
>spoofing the sent address with a randomly chosen address from the host's 
>address list.
>
>Jos
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html

_________________________________________________________________
Check out the coupons and bargains on MSN Offers! 
http://shopping.msn.com/softcontent/softcontent.aspx?scmId=1418