Administrivia: Mass-mailing worms

From: Marc Fossi (mfossi_at_securityfocus.com)
Date: 03/01/04

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #178" 
    Date: Mon, 1 Mar 2004 11:54:10 -0700 (MST)
To: Focus-MS <focus-ms@securityfocus.com>

    Hey folks,

    Just to let you all know (if you didn't already), there are currently
    quite a few mass-mailing worms making the rounds right now. The most
    prolific are variants of Netsky and Beagle a.k.a. Bagle.

    The reason I bring this up is that these worms tend to spoof the From
    address of the email they send by pulling the addresses from files on the
    infected user's system. In some cases, the spoofed address could make it
    appear that the message originated from this list (or any other list you
    may be a member of).

    I've already had a couple of people inquire about this, so I thought I may
    as well clarify for the entire list.

    Marc Fossi
    Symantec Corp.
    www.symantec.com

    ---------------------------------------------------------------------------
    Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
    wireless security

    Protect your network against hackers, viruses, spam and other risks with
    Astaro Security Linux, the comprehensive security solution that combines six
    applications in one software solution for ease of use and lower total cost
    of ownership.

    Download your free trial at
    http://www.securityfocus.com/sponsor/Astaro_focus-ms_040301
    ---------------------------------------------------------------------------

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #178"

    Relevant Pages

    • Re: blocking p2p traffic
      ... Network Security Specialist ... firewall with virus/spam protection, ... the comprehensive security solution that combines six ...
      (Focus-IDS)
    • RE: A new technique to disguise a target URL in spam
      ... I have seen the same technique used in other emails, ... firewall with virus/spam protection, URL filtering, VPN, ... Security Linux, the comprehensive security solution that combines six ...
      (Incidents)
    • RE: help with exchange
      ... Subject: help with exchange ... firewall with virus/spam protection, URL filtering, VPN, ... Security Linux, the comprehensive security solution that combines six ...
      (Security-Basics)
    • Re: help with exchange
      ... You can download an evaluation copy to see if its any use. ... Security Linux, the comprehensive security solution that combines six ... firewall with virus/spam protection, URL filtering, VPN, ...
      (Security-Basics)
    • RE: process tracking
      ... Snare to generate syslog messages to feed into KIWI Syslog and set up ... firewall with virus/spam protection, URL filtering, VPN, ... Astaro Security Linux, the comprehensive security solution that combines six ...
      (Focus-Microsoft)