full-disclosure - Infections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <200401271632.i0RGWgU21187@netsys.com>
From: gui at goddessmoon.org (Poof)
Subject: Infections

Yeah- I've already received OVER 200 copies of this darn virus. =/

>.< Both in Mailer Daemon and direct to me emails >.<

~

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-
> admin@...ts.netsys.com] On Behalf Of Jos Osborne
> Sent: Tuesday, January 27, 2004 9:32 AM
> To: full-disclosure@...ts.netsys.com
> Subject: [Full-Disclosure] Infections
> 
> Okay - I think someone on here's infected. Within a couple of hours of my
> address first appearing on this list, I got the following:
> 
> 
> ----------------------------------------------
> 
> Undeliverable: Delivery Status Notification (Failure)
> 
> Your message did not reach some or all of the intended recipients.
> 
>       Subject:	Delivery Status Notification (Failure)
>       Sent:	27/01/04 14:17
> 
> The following recipient(s) could not be reached:
> 
>       leo@...empton.co.uk on 27/01/04 14:30
>             The e-mail account does not exist at the organization this
> message was sent to.  Check the e-mail address, or contact the recipient
> directly to find out the correct address.
>             <kempton.twkempton.co.uk #5.1.1>
> 
>       mailbox@...empton.co.uk on 27/01/04 14:30
>             The e-mail account does not exist at the organization this
> message was sent to.  Check the e-mail address, or contact the recipient
> directly to find out the correct address.
>             <kempton.twkempton.co.uk #5.1.1>
> 
> ----------------------------------------------
> 
> 
> My system clock was reading 14:27 at the time I recieved this - an ever so
> slight discrepancy...
> From the reports I've been getting from users it looks like the virus is
> spoofing the sent address with a randomly chosen address from the host's
> address list.
> 
> Jos
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html