[Dshield] New Paypal Scam

Joe Stewart jstewart at lurhq.com
Thu Jan 15 13:57:50 GMT 2004

On Wednesday 14 January 2004 10:30 pm, Jason Baker wrote:
> That's responding with a 503 though.  Pity, I was feeling like
> playing forensic pathologist on some spamware tonight.

You're not missing out on anything new; the download was just the same 
Mimail.P sent earlier this month. It's just being sent now as a 
two-stage infection instead of one-stage.


Joe Stewart, GCIH 
Senior Security Researcher
LURHQ http://www.lurhq.com/

More information about the list mailing list