OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael H. Warfield (mhwwittsend.com)
Date: Sat Nov 17 2001 - 21:38:40 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Sat, Nov 17, 2001 at 04:03:23PM +0800, Shell, Hin-lik Hung wrote:
    > (Fri, Nov 16, 2001 at 04:22:33PM -0800) David Corcoran :
    > > Hello,
    > >
    > > A post has just bounced to me. The one stating:
    > >
    > > Hello,
    > > I send you this to have your advice ....
    > > [xxxx.doc]
    > This is sent by computer which virus infected.. I received
    > these kind of email everyday.. >.<

    > Just send back a email to notify the sender about is ok I think..

            The poor sender is just an innocent victim, as well. The
    virus (more correctly, the worm) is SirCam and it spoofs the sender
    "From" address based on E-Mail addresses in the infect persons
    address book. The message was not sent out by the person listed in
    the from address but was sent out by someone who had received a message
    from that person. SirCam basically goes through the address book
    harvesting addresses and then uses them to send messages to people
    in that list spoofed from other people in that list. Nasty bastard.

    > --
    > Best Regards,
    > Shell Hin-Lik Hung [ ?????O ] | http://www.shellhung.org/
    >
    > shell { shellhung.org linux.org.hk openbsd.org debian.org.hk }

            Mike

    -- 
     Michael H. Warfield    |  (770) 985-6132   |  mhwWittsEnd.com
      /\/\|=mhw=|\/\/       |  (678) 463-0932   |  http://www.wittsend.com/mhw/
      NIC whois:  MHW9      |  An optimist believes we live in the best of all
     PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!
    ***************************************************************
    Unix Smart Card Developers - M.U.S.C.L.E.
    (Movement for the Use of Smart Cards in a Linux Environment)
    http://www.linuxnet.com/
    To unsubscribe send an email to majordomolinuxnet.com with
    unsubscribe sclinux
    ***************************************************************