Mimail.C

From: Alan (alan.tennent_at_y3kgroup.com)
Date: 10/31/03

  • Next message: Rajiv Aaron Manglani: "GLSA: apache (200310-04)" 
    Date: 31 Oct 2003 15:18:23 -0000
To: bugtraq@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    The irritation has begun :/
    A new version of Mimail.C has cropped up. It spoofs the recipients domain and sends the mail as 'james@<spoofed domain>' and has an attachment: pictures.jpg.exe

    Some clients have reported massive amounts of lag due to its mass mailing and one client's firewall dropped as a result, although this might not be related.

    More info can be found on:
    http://www.f-secure.com/v-descs/bics.shtml

    Antigen pics the attachment up as I-Worm.WatchNet

    Keep an eye out and inform your users

    cheers

  • Next message: Rajiv Aaron Manglani: "GLSA: apache (200310-04)"