[Dshield] Fake Yahoo e-mail

Johannes B. Ullrich jullrich at sans.org
Sat Jan 17 17:23:35 GMT 2004

On Sat, 2004-01-17 at 10:57, Rick Klinge wrote:
> Wow.. Clicking the link now just diverts me to microsoft.com.. Fast redirect
> on that one good job guys.

no. bad job :-(. good job on the virus writers end. The 
Virus will download only once per IP address. the second attempt
will direct you to microsoft.com. Try a different ip ;-)

(see my prior email)

CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040117/5b3abc95/attachment.bin

More information about the list mailing list