[Dshield] Friendgreetings.com mass emailer

KickerRick kickerrick at kickerrick.servebeer.com
Fri Oct 25 16:56:56 GMT 2002


    Looks to me like a spam harvester, uses your own address book to scam
valid email addresses.


----- Original Message -----
From: "Russell Washington" <russ.washington at vaultsentry.com>
To: <list at dshield.org>
Sent: Friday, October 25, 2002 8:09 AM
Subject: RE: [Dshield] Friendgreetings.com mass emailer


> Craig nailed it, that's the one.  Symantec now has a doc up too:
>
>
http://securityresponse.symantec.com/avcenter/venc/data/friendgreetings.html
>
> Truth is that these companies can call it non-malicious all they want.
> Anything that masquerades itself as coming from someone else to facilitate
> propagation and mail-bombs contact lists is definitely treading in
> wormspace... and I'll bet this thing does a lot more than what the EULA
> authorizes although I have nothing to back that up.  We're thinking over
> here that the email addresses it pulls are probably getting culled for
> resale and reuse.
>
> But that's another discussion.  For anyone looking to extract this thing
> from their systems, good luck.  We're nuking the two boxes we found it on
> because we can't verify their integrity.
>
> "It's not a virus, it's not a worm... because it has a EULA" :)
>





More information about the list mailing list