[Dshield] Email Issues - Bogus,but confusing to users... Coul d confuse yours !

steven parks sparks at IDEAL.COM
Wed Mar 3 18:42:43 GMT 2004

half of my company has already received such an email. And in our case it
came from what is a valid email in our organization (not really of course).
I've had a lot of 'splaining to do :-)

-----Original Message-----
From: Chuck Lewis [mailto:clewis at iquest.net]
Sent: Wednesday, March 03, 2004 1:17 PM
To: General DShield Discussion List
Subject: [Dshield] Email Issues - Bogus,but confusing to users... Could
confuse yours !

Hi Folks,


Know the nasty virus is on the loose but look what we got today (I have
replaced the user name of our employee with Jan.Doe):



From: management at leesupply.net [mailto:management at leesupply.net] 

Sent: Wednesday, March 03, 2004 11:21 AM

To: Jan.Doe at leesupply.net

Subject: Warning about your e-mail account.


Hello  user of Leesupply.net  e-mail server,


Some of our  clients  complained  about the spam (negative e-mail


outgoing from your e-mail account.  Probably, you have been  infected by a
proxy-relay trojan server. In order to keep your  computer safe, follow the


Please, read the attach for further  details.


For security purposes  the attached file is password  protected. Password is


Have a good day,

   The  Leesupply.net team

http://www.leesupply.net <http://www.leesupply.net/> 



and attached is a 12KB file TextDocument.zip


We obviously have no "management at leesupply.net" address setup but this was
definitely confusing users.


Is there know way to track this source down ?


Thanks !



list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:

More information about the list mailing list