David W. Fenton wrote:

> On 21 May 2004 at 22:29, Javier Ruiz wrote:
> 
> > Today I received a message from Randy Stokes. Not a 
> personal one, no,
> > but one of those virus messages "Re: Your software" with an attached
> > exe application disguised as another thing.
> > 
> > The problem is serious when you see that even professionals got
> > viruses and let them spread.
> > 
> > I am glad I am on a Mac.
> 
> There's no guarantee that Randy was the infected one. The way these 
> worms are engineered, the only thing you know is that the FROM: and 
> TO: addresses were available to the worm that sent it out. Any person 
> that had both of them in their addressbooks could have been the 
> source of the infected email message.
> 
> Put another way, the FROM: address really does not mean anything at 
> all about the origin of the actual infected email. I get infection 
> notices and non-deliverable messages all the time for addresses that 
> I've never sent email to, and that did not originate from my PC (the 
> RECEIVED headers prove this).

A guy I know who owns his own domain has about 5 email address set up to be
"@his-own-domain.com". [1]  However, sometimes he gets spam and/or viruses
with bogus "@his-own-domain.com" addresses in the From line!  It's easy to
fake the address shown in the "From" header, as this post shows.

[1] Name changed to protect the innocent :)

-- 
Brad Beyenhof
[EMAIL PROTECTED]

_______________________________________________
Finale mailing list
[EMAIL PROTECTED]
http://lists.shsu.edu/mailman/listinfo/finale

Reply via email to