RE: Distressing, possibly life threatening emails from free accou nts (yahoo, hotmail

["Robinson, Sonja" <SRobinson () HIPUSA com>]

1. Save the e-mail in all its entirety.  Make sure ALL headers are saved.
2. perform header traceback as far as possible ensuring that the e-mail
address is not spoofed.  If it is traceback to proper ISP.
3.  Once this is performed take it to the users local/county PD and have
them subpoena the ISP for the user records.
4.  If you provide me with a geographic location of the user I will help you
find a contact there.  

Sonja Robinson, CISA
Network Security Analyst
HIP Health Plans
Office:  212-806-4125
Pager: 8884238615



-----Original Message-----
From: steve baker [mailto:stephenbbaker () hotmail com] 
Sent: Tuesday, May 27, 2003 12:39 PM
To: 
Subject: Distressing, possibly life threatening emails from free accounts
(yahoo, hotmail


One of our users has received questionable and possibly life threatening
emails from a yahoo account that was created recently.  They have approached
us to find out as much as we can pertaining to the person sending it.

Of course, we are not YAHOO so we cannot determine anything about the mail
other than the content.

How can we find out who sent this?

_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 2 months FREE*  
http://join.msn.com/?page=features/junkmail


---------------------------------------------------------------------------
----------------------------------------------------------------------------


**********************************************************************
This message is a PRIVILEGED AND CONFIDENTIAL communication, and is intended only for the individual(s) named herein or 
others specifically authorized to receive the communication. If you are not the intended recipient, you are hereby 
notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have 
received this communication in error, please notify the sender of the error immediately, do not read or use the 
communication in any manner, destroy all copies, and delete it from your system if the communication was sent via 
email. 




**********************************************************************


---------------------------------------------------------------------------
----------------------------------------------------------------------------