[Declude.JunkMail] Strange messages (Subject: 1)
In the last hours a I can see some strange messages (see attached samples) send from different servers and obviously forged mailfrom adresses. Each message has as Subject and as Body 1 and an attached but empty file named 1.txt The mailfrom-adress seems to be the first part of the recipients adress + some random domain name. I've added 1.txt to the Declude Virus BANNAME-List. Markus ---BeginMessage--- 1 1.txt Description: Binary data ---End Message--- ---BeginMessage--- 1 1.txt Description: Binary data ---End Message---
RE: [Declude.JunkMail] Strange messages (Subject: 1)
I have received a few of these myself. I have also banned 1.txt - considering a ban on *.txt temporarily because I get the feeling this is some kinda test. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Saturday, July 23, 2005 1:56 PM To: Declude.Virus@declude.com Cc: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Strange messages (Subject: 1) In the last hours a I can see some strange messages (see attached samples) send from different servers and obviously forged mailfrom adresses. Each message has as Subject and as Body 1 and an attached but empty file named 1.txt The mailfrom-adress seems to be the first part of the recipients adress + some random domain name. I've added 1.txt to the Declude Virus BANNAME-List. Markus --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Strange messages (Subject: 1)
Andrew reported this on the Sniffer list yesterday. I'm pretty sure that this is either a zombie spammer that is testing out his bot network, or this is a coding mistake that caused him to spam the number instead of actual content. Matt Markus Gufler wrote: In the last hours a I can see some strange messages (see attached samples) send from different servers and obviously forged mailfrom adresses. Each message has as Subject and as Body "1" and an attached but empty file named "1.txt" The mailfrom-adress seems to be the first part of the recipients adress + some random domain name. I've added "1.txt" to the Declude Virus BANNAME-List. Markus Subject: 1 From: "Domain" [EMAIL PROTECTED] Date: Sat, 23 Jul 2005 04:39:05 +0200 To: "Domain" [EMAIL PROTECTED] To: "Domain" [EMAIL PROTECTED] 1 Subject: 1 From: "Markus" [EMAIL PROTECTED] Date: Sat, 23 Jul 2005 20:52:21 +0200 To: "Markus" [EMAIL PROTECTED] To: "Markus" [EMAIL PROTECTED] 1 -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
