Re: Netsky.P -> sneaky one!

[Joe Matusiewicz <joem () nist gov>]

At 05:44 AM 3/23/2004, Andrew Aris wrote:
> Hi all,
>
> just had a mail throught that NAV has detected as being Netsky.P, the text
> of the mail was:
>
> From: jaume () megacceso com [mailto:jaume () megacceso com]
> Sent: 23 March 2004 08:24
> To: ****
> Subject: Re: approved information
>
>
> Authentication required.
>
> +++ Attachment: No Virus found
> +++ MC-Afee AntiVirus - www.mcafee.com
>
> I thought the "MC-Afee" bit was a nice touch, might just convince a fair few
> people!


I saw one a even better...the From: address was support () symantec com.  They 
were supposedly using their competitor's product -- Mc-Afee (sic) -- for 
their virus scanning.

-- Joe

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html