full-disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200402041335.i14DZF65029195@turing-police.cc.vt.edu>
From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Email 

On Wed, 04 Feb 2004 04:04:26 PST, D B <geggam692000@...oo.com>  said:

> I wish for someone from experience to explain to me
> why any virus can infect any mail server / user  when
> those administrating a mail server can make a mail
> server handle mail in the manner I pasted a snippet of

The "cannot be represented" wasn't done by the mail server, it
was generated that way by MyDoom itself, and is a big chunk of why
it was so successful.  It *conceals* the fact that it's an executable
binary and gives the user a plausible reason why they should open it.

> The message cannot be represented in 7-bit ASCII
> encoding and has been 
> sent as a binary attachment.

"Wow, I wonder what it is.... <click click>".

Social engineering at its finest.  :)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040204/b18b4c37/attachment.bin