full-disclosure - [Fwd: Last Critical Update]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <008101c38218$631fa4b0$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: [Fwd: Last Critical Update]

No user education is required.  Any Windows email reader worth its salt
should be automatically deleting all incoming attached files which are
executable programs.  Outlook has been doing this since the fall of
2000.  Outlook Express 6 also has this option, but it was off by default
until recently. :-(

Richard

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Ralf
Sent: Tuesday, September 23, 2003 2:23 PM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] [Fwd: Last Critical Update]

FYI, now they deliver viruses/trojans as attachement to a fake
"Microsoft security update" email.
There was an "update336.exe" attached which I'm not forwarding (please
ask offlist if interested).
Today's AntiVir detected it as a Worm.Gibe.C.1

Social engineering. One more thing to educate users about :-(

R/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030923/91ff1031/attachment.html