[60928] in North American Network Operators' Group
Hijacked email
daemon@ATHENA.MIT.EDU (Jack.W.Parks@alltel.com)
Wed Aug 20 08:37:07 2003
Date: Wed, 20 Aug 2003 07:36:23 -0500
From: <Jack.W.Parks@alltel.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
Anyone seeing hijacked email addresses with this Sobig-F worm? I did
some research and I know I didn't send anything to Investec Bank of
Johannesburg,ZA. On top of that, I definitely did not send a worm.
Thoughts?
Jack
-----Original Message-----
From: jlouw@investec.co.za [mailto:jlouw@investec.co.za]=20
Sent: Wednesday, August 20, 2003 4:11 AM
To: Parks, Jack W
Cc: VMeetoo@investec.co.mu
Subject: MailMarshal has detected a Virus in your message
Investec content scanning has stopped the following message:
Message: BB002e9963.00000001.mml
From: Jack.W.Parks@alltel.com
To: VMeetoo@investec.co.mu
Subject: Thank you!
Because it believes the message contains a virus.
The virus scanning software used was: Sophos AntiVirus (SAVI2 Interface)
Virus name: W32/Sobig-F
Please clean the file and resend it.
Rule: Inbound Messages : Block Virus
