[60879] in North American Network Operators' Group
Re: Virus emails from nanog mail list
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Aug 19 15:16:39 2003
To: David Diaz <techlist@smoton.net>
Cc: nanog@merit.edu
In-Reply-To: Your message of "Tue, 19 Aug 2003 12:42:49 EDT."
<p05200f04bb680320c606@[64.202.132.204]>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 19 Aug 2003 13:00:49 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_601240066P
Content-Type: text/plain; charset=us-ascii
On Tue, 19 Aug 2003 12:42:49 EDT, David Diaz <techlist@smoton.net> said:
> Obviously some bot has gone threw the nanog list and is now forging
> headers such that they appear to come from those addresses, and they
> are attaching viruses.
More likely, some poor lurker at the IP address listed has gotten hit with
one of the *MANY* worms that forge the From: field, and it's happily
forging in the name of all the most common NANOG posters.
My guess is it's w32-SoBig.F. But only because it's today, and that one
seems to be busy today. Ask me next week, it'll be another one. ;)
--==_Exmh_601240066P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQE/QlfBcC3lWbTT17ARAuIzAJ0c7xu2BJCr1R+k6X0sUPWQlw+80ACg387S
3tqWvSTogAujK2/Y0609FDw=
=Fx9i
-----END PGP SIGNATURE-----
--==_Exmh_601240066P--
