>...
>Anyone else been seeing a lot of these come in? The text includes a
>snippet about the Iran Nuclear situation and a link to a "full article".
>The article appears to have been pinched from elsewhere, but the page
>includes javascript which appears to use a buffer overflow to load a
>.hta file.
>
>All the links end in votnews dot com - thankfully the uribl's kept this
>one from hitting my users. Just thought I'd throw out a warning since
>it's not just more political spam, there's a payload.
>
>Evan
>
Strange spam from Leo Kuvayev - doesn't make sense. The registration
is at YesNIC and the entries are all nominated at rfci already.
Paul Shupak
[EMAIL PROTECTED]
