Re: [Full-Disclosure] Netsky.P -> sneaky one!
From: Joe Matusiewicz (joem_at_nist.gov)
To: "Andrew Aris" <firstname.lastname@example.org>, <email@example.com> Date: Tue, 23 Mar 2004 08:50:56 -0500
At 05:44 AM 3/23/2004, Andrew Aris wrote:
>just had a mail throught that NAV has detected as being Netsky.P, the text
>of the mail was:
>From: firstname.lastname@example.org [mailto:email@example.com]
>Sent: 23 March 2004 08:24
>Subject: Re: approved information
>+++ Attachment: No Virus found
>+++ MC-Afee AntiVirus - www.mcafee.com
>I thought the "MC-Afee" bit was a nice touch, might just convince a fair few
I saw one a even better...the From: address was firstname.lastname@example.org. They
were supposedly using their competitor's product -- Mc-Afee (sic) -- for
their virus scanning.
Full-Disclosure - We believe in it.