full-disclosure - Infections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <E075A187B11EED409B12D00100CAAD662D91@ntserver.meltemi.local>
From: Jos at meltemi.co.uk (Jos Osborne)
Subject: Infections

Okay - I think someone on here's infected. Within a couple of hours of my address first appearing on this list, I got the following:


----------------------------------------------

Undeliverable: Delivery Status Notification (Failure)

Your message did not reach some or all of the intended recipients.

      Subject:	Delivery Status Notification (Failure)
      Sent:	27/01/04 14:17

The following recipient(s) could not be reached:

      leo@...empton.co.uk on 27/01/04 14:30
            The e-mail account does not exist at the organization this message was sent to.  Check the e-mail address, or contact the recipient directly to find out the correct address.
            <kempton.twkempton.co.uk #5.1.1>

      mailbox@...empton.co.uk on 27/01/04 14:30
            The e-mail account does not exist at the organization this message was sent to.  Check the e-mail address, or contact the recipient directly to find out the correct address.
            <kempton.twkempton.co.uk #5.1.1>

----------------------------------------------


My system clock was reading 14:27 at the time I recieved this - an ever so slight discrepancy...
>From the reports I've been getting from users it looks like the virus is spoofing the sent address with a randomly chosen address from the host's address list.

Jos