full-disclosure - Netsky.P -> sneaky one!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <5.1.0.14.2.20040323084628.01ef7f40@email.nist.gov>
From: joem at nist.gov (Joe Matusiewicz)
Subject: Netsky.P -> sneaky one!

At 05:44 AM 3/23/2004, Andrew Aris wrote:
>Hi all,
>
>just had a mail throught that NAV has detected as being Netsky.P, the text
>of the mail was:
>
>From: jaume@...acceso.com [mailto:jaume@...acceso.com]
>Sent: 23 March 2004 08:24
>To: ****
>Subject: Re: approved information
>
>
>Authentication required.
>
>+++ Attachment: No Virus found
>+++ MC-Afee AntiVirus - www.mcafee.com
>
>I thought the "MC-Afee" bit was a nice touch, might just convince a fair few
>people!

I saw one a even better...the From: address was support@...antec.com.  They 
were supposedly using their competitor's product -- Mc-Afee (sic) -- for 
their virus scanning.

-- Joe