email spoofing
 

Dear All,
New worms may usurp your or my identity and send you an E-mail with an
attachment. Below is information about one of the kind. Now that you have
been warned you should have no problems on this score.
BG


From: http://securityresponse.symantec.com...ter/venc/data/

W32.Sobig.F @ mm is a mass-mailing, network-aware worm that sends itself to
all the email addresses it finds on an infected computer.

W32.Sobig.F @ mm uses a technique known as "email spoofing," by which the
worm randomly selects an address it finds on an infected computer, which
also means that the sender in the "From" field is most likely not the real
sender.

The spoofed addresses and the Send To addresses are both taken from the
files found on the computer.

Subject:
Details
Approved
My details
Thank you!
That movie
Wicked screensaver
Your application
Thank you!
Your details

Body:
See the attached file for details
Please see the attached file for details.

Attachment:
your_document.pif
document_all.pif
thank_you.pif
your_details.pif
details.pif
document_9446.pif
application.pif
wicked_scr.scr
movie0045.pif

Email spoofing
W32.Sobig.F @ mm uses a technique known as "spoofing," by which the worm
randomly selects an address it finds on an infected computer. The worm uses
this address as the "From" address when it performs its mass-mailing
routine. Numerous cases have been reported in which users of uninfected
computers received complaints that they sent an infected message to another
individual.

For example, Linda Anderson is using a computer infected with W32.Sobig.F @
mm . Linda is neither using an antivirus program nor has the current virus
definitions. When W32.Sobig.F @ mm performs its email routine, it finds the
email address of Harold Logan. The worm inserts Harold's email address into
the "From" portion of an infected message, which it then sends to Janet
Bishop. Then, Janet contacts Harold and complains that he sent her an
infected message; however, when Harold scans his computer, Norton AntiVirus
does not find anything, because his computer is not infected.

email spoofing
 

A little late? I got an enormous amount of these a while back, but haven't
had one for over a week or more. I guess the provider screens them out
PvR

Bruno Granier (Wanadoo) schreef
Dear All,
New worms may usurp your or my identity and send you an E-mail with an
attachment. Below is information about one of the kind. Now that you
have been warned you should have no problems on this score.
BG