full-disclosure - Re: [funsec] nasty infection from following link if anyone is interested

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <FEB0351E-BF40-4F4D-A4CE-6094C575C881@kyx.net>
Date: Wed, 25 Nov 2009 19:51:06 -0800
From: Dragos Ruiu <dr@....net>
To: Juha-Matti Laurio <juha-matti.laurio@...ti.fi>
Cc: funsec <funsec@...uxbox.org>, RandallM <randallm@...mail.com>,
	full-disclosure@...ts.grok.org.uk
Subject: Re: [funsec] nasty infection from following link
	if anyone is interested

Haha, and then you included his clickable link in your message  
inclusion.
Tsk, Tsk. <chuckle>

cheers,
--dr

On 25-Nov-09, at 12:16 PM, Juha-Matti Laurio wrote:

> Your modifications doesn't prevent your link to be clickable in all  
> mail clients.
> Please use methods
> http : // and/or
> archive1329101302 , heddasq
>
> next time...
>
> Juha-Matti
>
> RandallM [randallm@...mail.com] kirjoitti:
>> one of my sales people fell for a "someone posted a picture of you"  
>> emails.
>>
>> Got a real nasty that came with, according to malwarebytes,  
>> "Pawnd.bot
>> and Backdoor.bot".
>> Havent checked it out yet but thought I would share it.
>>
>>
>> The link is this:
>> (REMOVETHISFIRST http: // archive1329101302 , heddasq,eu/photo- 
>> hosting/)
>>
>> -- 
>> been great, thanks
>> a.k.a System
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

--
World Security Pros. Cutting Edge Training, Tools, and Techniques
Vancouver, Canada March 22-26  http://cansecwest.com
Amsterdam, Netherlands June 16/17 http://eusecwest.com
pgpkey http://dragos.com/ kyxpgp





_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/