full-disclosure - Doom virus: (Upon posting)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <000d01c3e4e5$5bf0fe70$7b0b0a0a@Security>
From: joel at helgeson.com (Joel R. Helgeson)
Subject: Doom virus: (Upon posting)

1) It spoofs the from: field - therefore it could show as coming from
anyone.
2) If someone opens the virus, it will propegate to all addresses in the
victims address book. If FD is in your address book, it'll send a copy to
the list - which has happened several times.

Joel R. Helgeson
Director of Networking & Security Services
SymetriQ Corporation

"Give a man fire, and he'll be warm for a day; set a man on fire, and he'll
be warm for the rest of his life."
----- Original Message ----- 
From: "Remko Lodder" <remko@...andar.org>
To: "Full-Disclosure" <full-disclosure@...ts.netsys.com>
Sent: Tuesday, January 27, 2004 6:12 AM
Subject: [Full-Disclosure] Doom virus: (Upon posting)

> Dudes,
>
> are you willing not to post the virusses to the mailinglist itself?
> If people do have them and want to have them contact eachother offlist.
>
> My scanner reports emails as virusses from fd now
>
> tia,
>
> --
>
> Kind regards,
>
> Remko Lodder
> Elvandar.org/DSINet.org
> www.mostly-harmless.nl Dutch community for helping newcomers on the
> hackerscene
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>