Re: clever virus attack (OT)

[Gonz]

I got the same thing.  It comes from email harvesters that found our 
email address on the PUG site.

I traced it to some computer in Poland.

rg

[EMAIL PROTECTED] wrote:

today I got this message from [EMAIL PROTECTED]

   Dear  user of Mindspring.com,

   Your e-mail account has  been temporary disabled because  of
unauthorized access.
   Advanced details  can be found in attached file.

   Attached file is protected with the password for security reasons.
Password is 16120.
   Cheers,
      The Mindspring.com team                   http://www.mindspring.com
And it had a nice little .zip attached called "readme.zip"

I didn't read it...

Christian

----- Original Message ----- 
From: "Mark Cassino" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 03, 2004 4:21 PM
Subject: Re: clever virus attack (OT)

 

Something new (for me) that I got yesterday was an eBay spoof asking you
   

to
 

click on a link and "update" your personal info on eBay.

What was new was that the text was mixed into a long string of garbage
   

with
 

some sort of HTML formatting that only showed the intended message.  SO
   

this:
 

"duringnourgreguiarwupdatekandbverificationmofztheoaccounts,ywelcouidn'tt
verifynyourpcurrentvinformation.weitheriyourginformationmhashchangedcorp
itsiscincomplete.
"aswauresult,eyourmaccessttofbidzorabuyloneebayahaslbeenirestricted.ctoxs
tartbusingwebaybaccountgfully,xpieasehupdatesandjverifyoyoureinformation
ibyzciicki!"
Showed up as

"During our regular update and verification of the account, we couldn't
verify.... etc..."
Seemed really odd (I only noticed the string of garbage when I highlighted
the message to send it to [EMAIL PROTECTED])  I wonder why they bothered to
encode the message that way - I doubt it anti-virus or even spam software
somehow would block the unscrambled message...
- MCC

-----

Mark Cassino Photography

Kalamazoo, MI

http://www.markcassino.com

-----