[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[no subject]



> Anybody recognize this garbage??
Yup.  The latest virus.  It has clever social engineering to get people
to open the attachment.  Some variants talk about the email server being
down, use this alternate one.  Others talk about account cancelled.

The virus and spam filter I created had no problem blocking it for
my clients.

Bob Toxen
bob at verysecurelinux.com               [Please use for email to me]
<a  rel="nofollow" href="http://www.verysecurelinux.com";>http://www.verysecurelinux.com</a>        [Network&amp;Linux/Unix security consulting]
<a  rel="nofollow" href="http://www.realworldlinuxsecurity.com";>http://www.realworldlinuxsecurity.com</a> [My book:&quot;Real World Linux Security 2/e&quot;]
Quality Linux &amp; UNIX security and SysAdmin &amp; software consulting since 1990.

&quot;Microsoft: Unsafe at any clock speed!&quot;
   -- Bob Toxen 10/03/2002

&gt; -- 
&gt; =============================================
&gt; If you think Education is expensive
&gt; Try Ignorance
&gt;                    Author Unknown
&gt; ============================================
&gt; 
&gt; ---------- Forwarded message ----------
&gt; Date: Fri, 05 Mar 2004 10:40:53 +0200
&gt; From: management at digichem.net
&gt; To: tfreeman at intel.digichem.net
&gt; Subject: Notify about using the e-mail account.
&gt; 
&gt; Dear user of e-mail server &quot;Digichem.net&quot;,
&gt; 
&gt; Your e-mail account has  been  temporary  disabled  because of unauthorized access.
&gt; 
&gt; Further  details  can be obtained from attached file.
&gt; 
&gt; In order to  read the attach you have to use the following password:  34183.
&gt; 
&gt; Best  wishes,
&gt;    The Digichem.net team                     <a  rel="nofollow" href="http://www.digichem.net";>http://www.digichem.net</a>


&gt; _______________________________________________
&gt; Ale mailing list
&gt; Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00102" href="msg00102.html">[ale] (fwd) Is this a trojan/worm?</a></strong>
<ul><li><em>From:</em> tfreeman at intel.digichem.net (tfreeman at intel.digichem.net)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00130.html">[ale] Need help with hardware change on Debian Sarge</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00132.html">[ale] The ALE Barbecue Is Coming Soon [somewhat [OT]]</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00109.html">[ale] (fwd) Is this a trojan/worm?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00211.html">[ale] (fwd) Is this a trojan/worm?</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00131"><strong>Date</strong></a></li>
<li><a href="threads.html#00131"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>