RE: MyDoom Email targets

["Geo." <geoincidents () getinfo org>]

Yes I've been seeing a LOT of that as well, and I believe it is an attempt
to mess up the blacklist spamtrap addresses such as the ones that spamcop
uses. The worm appears to generate a bunch of very common named email
addresses all on it's own.

Geo.

-----Original Message-----
I've noticed I'm getting a load of messages to my catch all domains with
addresses like adam@.... joe@.... sandra@.... - it's highly unlikely
that this would be part of anyone's address book - is there some
mechanism in the worm to try and propagate to random e-mail within a domain?

Scott Manley

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html