On Mon, Aug 25, 2003 at 11:09:32AM +0200, [EMAIL PROTECTED] wrote:
> Folks be careful!
>
> I found a Virus ("W32/Sobig-F") in the attachment "movie0045.pif".
> in the mail:
>
> from: <[EMAIL PROTECTED]>
> to: <[EMAIL PROTECTED]>
> CC:
> Date: Sat, 23 Aug 2003 16:48:15 --0400
> subject: [Pws] Re: Approved
>
Sobig fakes the from: line. So the virus could
be sent from anyone who has both the adress
of naala and pws in his Outlook-Adressbook.
The sender does not need to be a list-subscriber.
Because of the faked from: it makes no sense
to send warning mails as a reply to any
sobig mail: This just adds load to the
mailservers.
Marcus
--
Marcus Denker [EMAIL PROTECTED] -- Squeak! http://squeak.de
_______________________________________________
Pws mailing list
[EMAIL PROTECTED]
https://mailman.cc.gatech.edu/mailman/listinfo/pws
