[60883] in North American Network Operators' Group
Re: Virus emails from nanog mail list
daemon@ATHENA.MIT.EDU (Kevin Oberman)
Tue Aug 19 15:32:24 2003
To: David Diaz <techlist@smoton.net>
Cc: nanog@merit.edu
In-reply-to: Your message of "Tue, 19 Aug 2003 12:42:49 EDT."
<p05200f04bb680320c606@[64.202.132.204]>
Date: Tue, 19 Aug 2003 09:49:22 -0700
From: "Kevin Oberman" <oberman@es.net>
Errors-To: owner-nanog-outgoing@merit.edu
> Date: Tue, 19 Aug 2003 12:42:49 -0400
> From: David Diaz <techlist@smoton.net>
> Sender: owner-nanog@merit.edu
>
>
> Spam may be off topic but in this case relevant. Has anyone else
> noticed bounced emails that appear to have origionated from their
> nanog email boxes and contain viruses?
>
> Obviously some bot has gone threw the nanog list and is now forging
> headers such that they appear to come from those addresses, and they
> are attaching viruses.
>
> The IP address (which may or may not be accurate) appears to be
> [195.157.87.253].
>
> Has anyone else noticed this recently?
On many lists. The latest and most annoying version of Sobig worm has
hit the nets and I have gotten at least 50 copies already today.
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman@es.net Phone: +1 510 486-8634
