full-disclosure - Re: [++++SPAM++++] Fwd: threat to corporate security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3a166c090704100846i275d0dbj659e4c6736f6dbba@mail.gmail.com>
Date: Tue, 10 Apr 2007 16:46:25 +0100
From: n3td3v <n3td3v@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [++++SPAM++++] Fwd: threat to corporate
	security

On 4/10/07, Marco Ermini <markoer@...koer.org> wrote:
> Savvy enough ("large"... sic! :-)) corporations rarely let the out of
> office go out of the company's email servers. But you should *know*
> how such (large?!?) corporations work from *inside* to have a clue -
> instead that pretending to talk about thing that you don't know from
> the outside...

Do not play with n3td3v's intelligence, we've already harvested
mailboxes for Yahoo Inc, we've got internal operational data for Yahoo
Inc. Employees are doing more than saying they are out of office or
the dates they are coming back, they are openly talking about other
stuff as well.

We will release collect.txt if we need to prove the full scale of the issue.

Look below for an example:

---------- Forwarded message ----------
From: scottr@...oo-inc.com <scottr@...oo-inc.com>
Date: Apr 8, 2007 4:53 AM
Subject: Out of office until 4/16(auto-response): [yahoo security
policy should be more flexible]
To: n3td3v@...il.com

I'm out of the office until 4/16.
While I'm out, please contact paranoids@.
For sensitive legal issues please contact wstef@.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/