1) It spoofs the from: field - therefore it could show as coming from anyone. 2) If someone opens the virus, it will propegate to all addresses in the victims address book. If FD is in your address book, it'll send a copy to the list - which has happened several times.
Joel R. Helgeson Director of Networking & Security Services SymetriQ Corporation "Give a man fire, and he'll be warm for a day; set a man on fire, and he'll be warm for the rest of his life." ----- Original Message ----- From: "Remko Lodder" <[EMAIL PROTECTED]> To: "Full-Disclosure" <[EMAIL PROTECTED]> Sent: Tuesday, January 27, 2004 6:12 AM Subject: [Full-Disclosure] Doom virus: (Upon posting) > Dudes, > > are you willing not to post the virusses to the mailinglist itself? > If people do have them and want to have them contact eachother offlist. > > My scanner reports emails as virusses from fd now > > tia, > > -- > > Kind regards, > > Remko Lodder > Elvandar.org/DSINet.org > www.mostly-harmless.nl Dutch community for helping newcomers on the > hackerscene > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
