 | | | Hi | Hi 2004-11-15 - By tekano
Back
not necessarily an infected user on this list with a worm using their
address book, I believe the reason why our names are used more recently for
this kind of thing is because they are all available online on web sites
(soft mailing list archive and other online archives) which has been trawled
by web bots to isolate email address and then sent back (and sold on) to the
lists again being used for spamming worm propagation purposes. even the old
trick of name(at)whatever.com isnt enough defence from the trawlers.
The ones I get at work are more targeted and contain colleague addresses
with 'your file' attached and other silly ways to try and get the nieve to
execute the attachment, then they are in. thankfully the people responsible
dont have any social engineering skills (a different class of hack
altogether) and the mails are quite easy to spot or we'd all be royally
f***ed.!! its whoever thought of the idea of being able to attach things and
send html e-mails should be held responsible! text is text innit. its
obviously all microsoft fault. The thing is for every single clued up secure
user there are 100 nieve innocents sending document attachments with html
tainted mail, installing smilies and happily clicking on random attachments
because it might be funny...
I stopped tracing these nefarious mails after the umpteenth time but back
when it first started I used to press Ctrl F3 examine the headers, do a
\whois and complain to the originating IP/ISP. since the spoofed headers
thing started this exercise is pointless... the number of
virus/worm/trojans I recieve daily equals the number of bounces back I get
from my own spoofed header!! its a joke. which isnt funny.
./briefly mentions spybot and mail washer, tumbleweed rolls on by
tek
---
Unsubscribe? Mail Majordomo@(protected) with the following text in body:
unsubscribe xsi
|
|
|