[61042] in North American Network Operators' Group
Re: email virus ==> over the top
daemon@ATHENA.MIT.EDU (Mike Tancsa)
Thu Aug 21 14:55:51 2003
Date: Thu, 21 Aug 2003 14:53:24 -0400
To: neal rauhauser <neal@lists.rauhauser.net>
From: Mike Tancsa <mike@sentex.net>
Cc: nanog@nanog.org
In-Reply-To: <3F44E0D4.74001B84@lists.rauhauser.net>
Errors-To: owner-nanog-outgoing@merit.edu
Probably not. The virus grabs a From address at random from the infected
person's email in box. So its more likely someone who has got mail FROM
those people rather than those people. See
http://vil.nai.com/vil/content/v_100561.htm
To quote,
"The "From:" address may be spoofed with an address extracted from the
victim machine."
---Mike
At 10:10 AM 21/08/2003 -0500, neal rauhauser wrote:
><user>@cisco.com
><user>@tacnet.com
><user>@wcom.com
><user>@sprint.com
>
>
> Looks like my internetwork equipment vendor and my two favorite peers
>have their Windoze stuff in a complete state of 'higgledy piggledy' - a
