[68978] in North American Network Operators' Group
Re: SPAM and Virus emails to NANOG
daemon@ATHENA.MIT.EDU (Steven M. Bellovin)
Fri Mar 19 15:58:01 2004
From: "Steven M. Bellovin" <smb@research.att.com>
To: greg@xwb.com
Cc: nanog@merit.edu
In-Reply-To: Your message of "Fri, 19 Mar 2004 14:19:27 CST."
<200403191419.AA483787046@xwb.com>
Date: Fri, 19 Mar 2004 15:57:24 -0500
Errors-To: owner-nanog-outgoing@merit.edu
In message <200403191419.AA483787046@xwb.com>, "Gregory Taylor" writes:
>
>Can somebody explain to me why I keep getting e-mails with no content that are
> setting off my virus scanners via NANOG list?
>
Probably because there's a worm that's sending the messages -- messages
that purport to be from legitimate NANOG posters. Let me guess -- the
body of these messages starts <OB JECT STYLE='display:none"...> (I've
added a blank because the existence of the exact string does trigger
some filters.)
--Steve Bellovin, http://www.research.att.com/~smb
