I found two such messages in my mail box today.  Here is the text:

----- Original Message ----- 
From: <[EMAIL PROTECTED]>
To:
Sent: Monday, 2004-01-26 20:41
Subject: Mail Transaction Failed


> Mail transaction failed. Partial message is available.
>
>

The above one had no attachment, but the below one had a aczzzgm.com
attachment, that when I clicked on the mail itself, not on the attachment,
it wanted to save a ATT001.wav file to the "My documents" folder.



  ----- Original Message ----- 
  From: Postmaster
  To: inet recipient
  Sent: Monday, 2004-01-26 09:16
  Subject: Failure Report



  This is the qmail program



  Undeliverable to [EMAIL PROTECTED]


  Message follows:





These have been appearing in my main account on and off for a couple of
weeks now.  I usually don't open them but delete them right away.  I am
running up-to-date antivirus software, which has not alerted me that these
mails contain a worm or virus.  However, I have not clicked on the
attachment to open them, so maybe it won't warn me unless I do.

Is this what you are getting?

Euric


----- Original Message ----- 
From: "Brad Ackerman" <[EMAIL PROTECTED]>
To: "U.S. Metric Association" <[EMAIL PROTECTED]>
Sent: Monday, 2004-01-26 20:14
Subject: [USMA:28406] Re: Scam?


> On Jan 26, 2004, at 19:50, Bill Hooper wrote:
>
> > I have received a significant number of "undelivered mail" messages,
> > all with mysterious techno-gibberish, and none of which bore any
> > resemblance to any email I had sent out. Each had a single attachment.
> > To me that seems suspicious.
>
> After breaking into somebody's computer, a spammer sends emails to a
> list of random addresses (Rumpelstiltzkin attack) with a fake return
> address.  The messages bounce, and the bounce message is undeliverable,
> causing it to be bounced to your postmaster alias.  The attachment is
> probably a worm that constitutes the trespass of step 1 above.
>
> -- 
> Brad Ackerman N1MNB           "The Chinese Bill of Rights isn't worth
> [EMAIL PROTECTED]     28 42 17 N     the acetate it's not printed on."
> PGP: 0x62D6B223      81 23 28 W                      -- Penn Jillette
>
>

Reply via email to