[Dshield] Email Issues - Bogus, but confusing to users... Could confuse yours !

Sean Waddell swaddell at espgroup.net
Wed Mar 3 18:45:36 GMT 2004


We've seen several of those come in today.  Good thing we rip out most 
attachments ;-)


Sean Waddell
Operations Manager
The ESP Group LLC







Chuck Lewis wrote:
> Hi Folks,
> 
>  
> 
> Know the nasty virus is on the loose but look what we got today (I have
> replaced the user name of our employee with Jan.Doe):
> 
>  
> 
>  
> 
> From: management at leesupply.net [mailto:management at leesupply.net] 
> 
> Sent: Wednesday, March 03, 2004 11:21 AM
> 
> To: Jan.Doe at leesupply.net
> 
> Subject: Warning about your e-mail account.
> 
>  
> 
> Hello  user of Leesupply.net  e-mail server,
> 
>  
> 
> Some of our  clients  complained  about the spam (negative e-mail
> 
> content)
> 
> outgoing from your e-mail account.  Probably, you have been  infected by a
> proxy-relay trojan server. In order to keep your  computer safe, follow the
> instructions.
> 
>  
> 
> Please, read the attach for further  details.
> 
>  
> 
> For security purposes  the attached file is password  protected. Password is
> "12510".
> 
>  
> 
> Have a good day,
> 
>    The  Leesupply.net team
> 
> http://www.leesupply.net <http://www.leesupply.net/> 
> 
>  
> 
>  
> 
> and attached is a 12KB file TextDocument.zip
> 
>  
> 
> We obviously have no "management at leesupply.net" address setup but this was
> definitely confusing users.
> 
>  
> 
> Is there know way to track this source down ?
> 
>  
> 
> Thanks !
> 
>  
> 
> Chuck
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list