RE: Domain HiJacking by SPAMMERS

["Shawn Jackson" <sjackson () horizonusa com>]

  Unfortunately there is limited recourse for this. The only way I can
think of is to actually use the add and see who contacts you, then
follow the 'money trail'. A friend of mine did this when they were using
his email address as the return path, it was for a loan though. 

Shawn Jackson
Systems Administrator
Horizon USA
1190 Trademark Dr #107
Reno NV 89521

www.horizonusa.com
Email: sjackson () horizonusa com
Phone: (775) 858-2338
             (800) 325-1199 x338



-----Original Message-----
From: saliskor () cyberus ca [mailto:saliskor () cyberus ca] 
Sent: Thursday, January 29, 2004 7:45 AM
To: security-basics () securityfocus com
Subject: Domain HiJacking by SPAMMERS




A client of mine has been having serious difficulties with SPAMMERS
using their domain name as a return address for sending spam. The Names
are ficticious, of course, and only a inconvenience due to the NDRs
being returned through the mail system.

The most serious problem is that the subject of the SPAM could cause a
major public relations problem for the company, since it is mostly
online-drug sales and private enhancements being marketed. 

A thorough check of the mail system and tracing of the original spam
messages confirm that the company's systems are not being used as
relays. Most the the messages originate in the Far/Middle east or
Europe.

Any suggestions as to what can be done, or how to handle such a
situation would definitely be appreciated.

Rick

------------------------------------------------------------------------
---
Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off
any 
course! All of our class sizes are guaranteed to be 10 students or less.

We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion
Prevention, 
and many other technical hands on courses. 
Visit us at http://www.infosecinstitute.com/securityfocus to get $720
off 
any course!  
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any
course! All of our class sizes are guaranteed to be 10 students or less.
We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention,
and many other technical hands on courses.
Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off
any course!
----------------------------------------------------------------------------