RE:Probable Trojan

From: Gene Bransfield (flyersfanindc_at_yahoo.com)
Date: 10/29/03

  • Next message: Bassett, Mark: "RE: Large increase in port 27347" 
    Date: Wed, 29 Oct 2003 13:47:45 -0800 (PST)
To: security-basics@securityfocus.com

    All,

    Thank you very much for your information. I
    appreciate everyone's input and I have learned a lot.

    Lesson learned: Always ask the obvious question.

    The obvious question was: What were you doing with
    your AOL account before it was hacked?

    The obvious question was asked by the local sysadmin.

    One would assume that my buddy would have informed me
    about any recent unusual AOL activity (like
    unsolicited emails), but it's really my fault for not
    asking the obvious question.

    Be on the look-out for the InstaKiss email from any
    AOL addresses. They are bogus. The link associated
    brings you to a false AOL login page where usernames
    and passwords are harvested for SPAM mongers. More
    info in the link:

    http://www.spamsolutions.net/instakiss.asp

    I thought my buddy would have been smart enough not to
    click on links in unsolicited emails, but alas my
    friend is stupid. I have informed him that he owes me
    a case of beer. I'll be happy to share with the list.

    Thanks again,

    Gene

    __________________________________
    Do you Yahoo!?
    Exclusive Video Premiere - Britney Spears
    http://launch.yahoo.com/promos/britneyspears/

    ---------------------------------------------------------------------------
    Network with over 10,000 of the brightest minds in information security
    at the largest, most highly-anticipated industry event of the year.
    Don't miss RSA Conference 2004! Choose from over 200 class sessions and
    see demos from more than 250 industry vendors. If your job touches
    security, you need to be here. Learn more or register at
    http://www.securityfocus.com/sponsor/RSA_incidents_031023
    and use priority code SF4.
    ----------------------------------------------------------------------------

  • Next message: Bassett, Mark: "RE: Large increase in port 27347"
    • Quantcast