Hi Fredy!

Same effect here. Lots of those Swissair-mails. F(i | �)rst class...

Matthias

----- Original Message ----- 
From: "Fredy Kuenzler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 28, 2004 1:28 AM
Subject: [swinog] OT: F�rst's Spam PC hacked?


Sorry for beeing OT, but I think this is rather remarkable.

I got more than a dozen of F�rst-alike spam mails within the last hour
or so, recently advertising the remaining SWISSAIR junk.

The subject is as it was, the mailheader also look-alike, but the body
looks like a virus, however there is no attachment, but simply the
sentence "hi did you got my message ?" (see full header below).

Looks like someone has taken over F�rsts actually well-known unsecure
Spam PC, exchanged quietly the message and restarted the spamming
process ...

F.




 From - Fri May 28 00:49:17 2004
X-UIDL: h\&"!6O#"!W>K!!h%^"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <[EMAIL PROTECTED]>
Received: from 66.90.100.163 ([66.90.100.163])
by taguan.init7.net (8.11.7/8.11.7) with SMTP id i4RMBPT01159;
Fri, 28 May 2004 00:11:26 +0200
Received: from 80.168.154.180 by ; Thu, 27 May 2004 17:06:25 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "First-Class Liquidation" <[EMAIL PROTECTED]>
Reply-To: "First Class-Liquidation " <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: SWISSAIR Dessert-Bestecke versilbert aus First-Class mit �ber
50% Preisnachlass!
Date: Thu, 27 May 2004 20:09:25 -0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--7704027021637848"
X-Priority: 3
X-IP: 158.5.160.170
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on taguan
X-Spam-Status: No, hits=1.2 required=3.5 tests=BAYES_50,PRIORITY_NO_NAME
autolearn=no version=2.63
X-Spam-Level: *
X-UIDL: h\&"!6O#"!W>K!!h%^"!

----7704027021637848
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

hi did you got my message ?

----7704027021637848--
_______________________________________________
swinog mailing list
[EMAIL PROTECTED]
http://lists.init7.net/cgi-bin/mailman/listinfo/swinog


_______________________________________________
swinog mailing list
[EMAIL PROTECTED]
http://lists.init7.net/cgi-bin/mailman/listinfo/swinog

Reply via email to