Sorry for beeing OT, but I think this is rather remarkable.
I got more than a dozen of F�rst-alike spam mails within the last hour or so, recently advertising the remaining SWISSAIR junk.
The subject is as it was, the mailheader also look-alike, but the body looks like a virus, however there is no attachment, but simply the sentence "hi did you got my message ?" (see full header below).
Looks like someone has taken over F�rsts actually well-known unsecure Spam PC, exchanged quietly the message and restarted the spamming process ...
F.
From - Fri May 28 00:49:17 2004
X-UIDL: h\&"!6O#"!W>K!!h%^"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <[EMAIL PROTECTED]>
Received: from 66.90.100.163 ([66.90.100.163])
by taguan.init7.net (8.11.7/8.11.7) with SMTP id i4RMBPT01159;
Fri, 28 May 2004 00:11:26 +0200
Received: from 80.168.154.180 by ; Thu, 27 May 2004 17:06:25 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "First-Class Liquidation" <[EMAIL PROTECTED]>
Reply-To: "First Class-Liquidation " <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: SWISSAIR Dessert-Bestecke versilbert aus First-Class mit �ber 50% Preisnachlass!
Date: Thu, 27 May 2004 20:09:25 -0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--7704027021637848"
X-Priority: 3
X-IP: 158.5.160.170
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on taguan
X-Spam-Status: No, hits=1.2 required=3.5 tests=BAYES_50,PRIORITY_NO_NAME
autolearn=no version=2.63
X-Spam-Level: *
X-UIDL: h\&"!6O#"!W>K!!h%^"!
----7704027021637848 Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable
hi did you got my message ?
----7704027021637848-- _______________________________________________ swinog mailing list [EMAIL PROTECTED] http://lists.init7.net/cgi-bin/mailman/listinfo/swinog
