[Dshield] He has been captured - Possible Virus Email

Deb Hale haled at pionet.net
Fri Jun 3 13:16:13 GMT 2005


Contains a trojan downloader.  If you clicked on the attachment - you have
been had.

Deb


-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of Mark Owen
Sent: Thursday, June 02, 2005 8:31 PM
To: General DShield Discussion List
Subject: Re: [Dshield] He has been captured - Possible Virus Email


FAKE!
Osama is still at large:
http://blogcritics.org/archives/2005/06/02/163902.php


On 6/2/05, Karen Gispanski <kgisp001 at yahoo.com> wrote:
> Has anyone received emails claiming Osama Bin Laden has been captured?  
> Some subject lines read He has been captured and others read Glod 
> Bless America! It has a attachment pictures.zip.  The content in the 
> email is:
> 
> Turn on your TV. From: you at msn.com Bcc: Return-Path: you at msn.com 
> Message-ID: X-OriginalArrivalTime: 02 Jun 2005 20:57:09.0751 (UTC) 
> FILETIME=[A48F1870:01C567B5] Date: 2 Jun 2005 16:57:09 -0400 Osama Bin 
> Laden has been captured. While CNN has no pictures at this point of 
> time, the military channel (PPV) released some pictures. I managed to 
> capture a couple of these pictures off my TV. Ive attached a slideshow 
> containing all the pictures I managed to capture. I apologize for the 
> low quality, its the best I could do at this point of time. Hopefully 
> CNN will have pictures and a video soon. God bless the USA! Sergio 
> Ruiz
> 
> 
> 
> 
> 
> 
> 
> ---------------------------------
> Yahoo! Mail Mobile
>  Take Yahoo! Mail with you! Check email on your mobile phone.
> -------------- Sponsor Message ------------------------------------
> Join us at SANSFIRE 2005 in Atlanta!
> The Internet Storm Center Conference.
> Details: http://www.sans.org/sansfire2005
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 


-- 
Mark Owen

-------------- Sponsor Message ------------------------------------
Join us at SANSFIRE 2005 in Atlanta!
The Internet Storm Center Conference.
Details: http://www.sans.org/sansfire2005

_______________________________________________
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list







More information about the list mailing list