[Dshield] Email Issues - Bogus, but confusing to users... Could confuse yours !

Chuck Lewis clewis at iquest.net
Wed Mar 3 18:17:07 GMT 2004


Hi Folks,

 

Know the nasty virus is on the loose but look what we got today (I have
replaced the user name of our employee with Jan.Doe):

 

 

From: management at leesupply.net [mailto:management at leesupply.net] 

Sent: Wednesday, March 03, 2004 11:21 AM

To: Jan.Doe at leesupply.net

Subject: Warning about your e-mail account.

 

Hello  user of Leesupply.net  e-mail server,

 

Some of our  clients  complained  about the spam (negative e-mail

content)

outgoing from your e-mail account.  Probably, you have been  infected by a
proxy-relay trojan server. In order to keep your  computer safe, follow the
instructions.

 

Please, read the attach for further  details.

 

For security purposes  the attached file is password  protected. Password is
"12510".

 

Have a good day,

   The  Leesupply.net team

http://www.leesupply.net <http://www.leesupply.net/> 

 

 

and attached is a 12KB file TextDocument.zip

 

We obviously have no "management at leesupply.net" address setup but this was
definitely confusing users.

 

Is there know way to track this source down ?

 

Thanks !

 

Chuck




More information about the list mailing list