[Dshield] Email Issues - Bogus, but confusing to users... Could confuse yours !

Chuck Lewis clewis at iquest.net
Wed Mar 3 18:17:07 GMT 2004

Hi Folks,


Know the nasty virus is on the loose but look what we got today (I have
replaced the user name of our employee with Jan.Doe):



From: management at leesupply.net [mailto:management at leesupply.net] 

Sent: Wednesday, March 03, 2004 11:21 AM

To: Jan.Doe at leesupply.net

Subject: Warning about your e-mail account.


Hello  user of Leesupply.net  e-mail server,


Some of our  clients  complained  about the spam (negative e-mail


outgoing from your e-mail account.  Probably, you have been  infected by a
proxy-relay trojan server. In order to keep your  computer safe, follow the


Please, read the attach for further  details.


For security purposes  the attached file is password  protected. Password is


Have a good day,

   The  Leesupply.net team

http://www.leesupply.net <http://www.leesupply.net/> 



and attached is a 12KB file TextDocument.zip


We obviously have no "management at leesupply.net" address setup but this was
definitely confusing users.


Is there know way to track this source down ?


Thanks !



More information about the list mailing list