[Intrusions] New SPAM Technique?

[Tom Liston]

On 3 Jun 2004 at 10:07, Hillery wrote:

> Sources are a variety of places - many .cn and .kr, some us dsl &
> broadband.  I haven't been able to get anything from a machine where they
> were outbound (the src), and have only seen the dst traffic.

Folks,

This is single packet pop-up spam sent via UDP... It's connectionless.  So 
if the people sending this stuff have ANY brains at all, the source IP is 
about as useful as the "From" line in email.

-TL