Re: [Full-Disclosure] Netsky.P -> sneaky one!

From: Joe Matusiewicz (joem_at_nist.gov)
Date: 03/23/04

  • Next message: John Cartwright: "Re: [Full-Disclosure] viruses being sent to this list"
    To: "Andrew Aris" <andrew@dev.bigfishinternet.co.uk>, <full-disclosure@lists.netsys.com>
    Date: Tue, 23 Mar 2004 08:50:56 -0500
    
    

    At 05:44 AM 3/23/2004, Andrew Aris wrote:
    >Hi all,
    >
    >just had a mail throught that NAV has detected as being Netsky.P, the text
    >of the mail was:
    >
    >From: jaume@megacceso.com [mailto:jaume@megacceso.com]
    >Sent: 23 March 2004 08:24
    >To: ****
    >Subject: Re: approved information
    >
    >
    >Authentication required.
    >
    >+++ Attachment: No Virus found
    >+++ MC-Afee AntiVirus - www.mcafee.com
    >
    >I thought the "MC-Afee" bit was a nice touch, might just convince a fair few
    >people!

    I saw one a even better...the From: address was support@symantec.com. They
    were supposedly using their competitor's product -- Mc-Afee (sic) -- for
    their virus scanning.

    -- Joe

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: John Cartwright: "Re: [Full-Disclosure] viruses being sent to this list"