Re: Win32.Sircam.Worm Alert.....
From: Peter Gutmann (pgut001@cs.auckland.ac.nz)Date: 07/25/01
- Previous message: Nicolas Gregoire: "Re: Win32.Sircam.Worm Alert....."
- Maybe in reply to: EPiC: "Win32.Sircam.Worm Alert....."
- Next in thread: Pete Sherwood: "Re: Win32.Sircam.Worm Alert....."
- Next in thread: Meritt James: "multi-OS infections (was Re: A code red that could bring down the net?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 25 Jul 2001 14:20:55 +1200 (NZST) Message-ID: <200107250220.OAA356109@ruru.cs.auckland.ac.nz> From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: epic@hack3r.com, martin@phreakproductions.cjb.net Subject: Re: Win32.Sircam.Worm Alert.....
Martin Lindquist <martin@phreakproductions.cjb.net> writes:
>Today I received two e-mails with the mentioned attachments, although from
>people I have never heard of before.
I've had about 10MB of this stuff (all automatically junked by procmail :-)
ranging from 200-600K, however as with Martin they were all from people I've
never heard of before. The advisory claims they're sent out to people in the
sender's contact list, but I've never communicated with any of the senders.
Since the body was automatically junked I don't have a copy to look at, but
could these things be carrying some built-in target list (eg a spammer's
database), or be contacting some spammers server for target addresses? I just
find it rather unlikely that I'd be in the contact list for a whole pile of
people I've never heard of before (or maybe they're just all out to get me, who
knows :-).
Peter.
- Previous message: Nicolas Gregoire: "Re: Win32.Sircam.Worm Alert....."
- Maybe in reply to: EPiC: "Win32.Sircam.Worm Alert....."
- Next in thread: Pete Sherwood: "Re: Win32.Sircam.Worm Alert....."
- Next in thread: Meritt James: "multi-OS infections (was Re: A code red that could bring down the net?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|