Dailydave mailing list archives
Re: ello! =))
From: Peter Wood <peterw () firstbase co uk>
Date: Fri, 16 Apr 2004 09:33:09 +0100
At 08:52 16/04/2004 +0100, Nexus wrote: >> I'm no expert either, but according to the Sophos site it looks like a >> Bagle worm. Interesting that it's using my address in the From field - I >> run Sophos up to date, and just for good measure, I just ran their Bagle >> disinfector which says I don't have it. Any ideas, anyone? > >It's spoofed that's all - source IP is in Russia. >Most mm@ viruses will snarf the users address book and internet cache for >email addresses and use them for the spoofed mail from: address. It just >means that someone that has your email address on their system in some way >has been infected. I've had 2 sent to FD myself... > >Cheers, > JJ Thanks JJ - I hoped it was something like that. Pete ~{:-D --------------------------------------------------------------------------------------------------------------------------------*** Come and visit our stand number 614 at Infosecurity, Olympia, 27th-29th April *** *** Free Tickets available from: http://www.fbtechies.co.uk/exhibitions.shtml ***
-------------------------------------------------------------------------------------------------------------------------------- Peter Wood FBCS CITP MIMIS MIEEE Chief of Operations First Base Technologies +44 (0)1273 454525 www.fbtechies.co.uk www.white-hats.co.uk _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://www.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- ello! =)) peterw (Apr 15)
- Message not available
- Re: ello! =)) Peter Wood (Apr 16)
- Message not available
- Re: ello! =)) Peter Wood (Apr 16)
- Re: ello! =)) Peter Wood (Apr 16)
- Message not available