Re: Weird HTML email

From: Philip Storry (phil@philipstorry.net)
Date: 05/30/02


Date: Thu, 30 May 2002 00:45:20 +0100
From: Philip Storry <phil@philipstorry.net>
To: security-basics@securityfocus.com

Hello Roberto,

Wednesday, May 29, 2002, 3:01:48 AM, you wrote:

rpn> I have been getting HTML email from different folks on one of my account.
rpn> They all are similar to the HTML below. Can someone tell me what this email
rpn> is all about? Does it pose a security threat?

rpn> -Roberto Cahanap

rpn> <HTML><HEAD></HEAD><BODY>
rpn> <iframe src=cid:S2oyJYo06RO0 height=0 width=0>
rpn> </iframe>
rpn> <FONT></FONT></BODY></HTML>

I've had similar emails. They had two more attachments - another HTML
file, and an executable or screensaver file. Further analysis of the
executable/screensaver showed that it was the Klez worm/virus.

-- 
Best regards,
 Philip                            mailto:phil@philipstorry.net