[60137] in North American Network Operators' Group
Re: maybe this should be on sec focus but.
daemon@ATHENA.MIT.EDU (Joe Boyce)
Fri Aug 1 14:50:51 2003
Date: Fri, 1 Aug 2003 11:35:15 -0700
From: Joe Boyce <jboyce@shasta.com>
To: 'nanog@merit.edu' <nanog@merit.edu>
In-Reply-To: <75634F04BFCFD511BF69009027DC86497D1885@mailman.thenap.com>
Errors-To: owner-nanog-outgoing@merit.edu
Friday, August 1, 2003, 11:45:25 AM, you wrote:
DW> I have had like 4 users call and tell me that they're receiving
DW> email from admin@ourdomainname with a unidentified attachment, possibly a
DW> worm that exploits the new Microsoft vulnerability last week, all 4 of these
DW> people reported that their updated this morning antivirus software missed
DW> it.
I believe it is this:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL.A
I've overheard the same calls starting this morning also, all
pertaining to emails supposedly from admin@ourdomain.com.
Regards,
Joe Boyce
---
InterStar, Inc. - Shasta.com Internet
Phone: +1 (530) 224-6866 x105
Email: jboyce@shasta.com