Re: Hijacked email

[jlewis () lewis org]

On Wed, 20 Aug 2003, Pascal Gloor wrote:

> > Anyone seeing hijacked email addresses with this Sobig-F worm?  I did
> > some research and I know I didn't send anything to Investec Bank of
> > Johannesburg,ZA. On top of that, I definitely did not send a worm.
>
> same here... seems the worm is not only using the adress book for targets,
> but also as sources..

Is this surprising to anyone?  That's the way the past few Lookout Virus 
Express viruses have worked.  The funny thing is, on this account, I've 
gotten zero copies that I've noticed...just lots of mail from various 
lists talking about it.  

On my work account, I've gotten several this morning and a bunch of 
bounces.
 
----------------------------------------------------------------------
 Jon Lewis *jlewis () lewis org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |  
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________