[Dshield] Email Issues - Bogus,but confusing to users... Coul d confuse yours !

steven parks sparks at IDEAL.COM
Wed Mar 3 18:42:43 GMT 2004


half of my company has already received such an email. And in our case it
came from what is a valid email in our organization (not really of course).
I've had a lot of 'splaining to do :-)

-----Original Message-----
From: Chuck Lewis [mailto:clewis at iquest.net]
Sent: Wednesday, March 03, 2004 1:17 PM
To: General DShield Discussion List
Subject: [Dshield] Email Issues - Bogus,but confusing to users... Could
confuse yours !


Hi Folks,

 

Know the nasty virus is on the loose but look what we got today (I have
replaced the user name of our employee with Jan.Doe):

 

 

From: management at leesupply.net [mailto:management at leesupply.net] 

Sent: Wednesday, March 03, 2004 11:21 AM

To: Jan.Doe at leesupply.net

Subject: Warning about your e-mail account.

 

Hello  user of Leesupply.net  e-mail server,

 

Some of our  clients  complained  about the spam (negative e-mail

content)

outgoing from your e-mail account.  Probably, you have been  infected by a
proxy-relay trojan server. In order to keep your  computer safe, follow the
instructions.

 

Please, read the attach for further  details.

 

For security purposes  the attached file is password  protected. Password is
"12510".

 

Have a good day,

   The  Leesupply.net team

http://www.leesupply.net <http://www.leesupply.net/> 

 

 

and attached is a 12KB file TextDocument.zip

 

We obviously have no "management at leesupply.net" address setup but this was
definitely confusing users.

 

Is there know way to track this source down ?

 

Thanks !

 

Chuck

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list