Incidents
Strange mail with number in subject line and body Jun 06 2006 05:44AM
paul.johnson8@gmail.com (paul johnson8 gmail com) (4 replies)
Re: Strange mail with number in subject line and body Jun 07 2006 06:51AM
Isaac Perez (suscripcions tsolucio com)
Re: Strange mail with number in subject line and body Jun 07 2006 02:56AM
Russell Fulton (r fulton auckland ac nz)
RE: Strange mail with number in subject line and body Jun 07 2006 02:50AM
Poof (poof fansubber com) (1 replies)
RE: Strange mail with number in subject line and body Jun 07 2006 03:01AM
Trevor Jennings (trevor mytek net)
Re: Strange mail with number in subject line and body Jun 07 2006 02:49AM
Jamie Riden (jamesr europe com) (1 replies)
RE: Strange mail with number in subject line and body Jun 07 2006 11:21AM
Tim Boyer (jim denmantire com)
>
> On 06/06/06, paul.johnson8 (at) gmail (dot) com [email concealed] <paul.johnson8 (at) gmail (dot) com [email concealed]> wrote:
> > We have received a few strange emails (from Korea and France) which
> > lists a three character number in the subject line and a different
> > three digit character number in the body, no attachments.
> >
> > The sender (from field) has been spoofed and displays the receivers
> > name (to field).
> >
> > I did a search on google but could not find any further information.
> > Has any seen or know where/why these emails are being received? Maybe
> > a sdbot infection on zombie PC?
>
> It's mentioned in the ISC diary today - I got one too, but I haven't
> seen any good theories about what it is. It could just be a mistake on
> behalf of the spammers.
>
> If you feel like it, you could note the IP address it originated from
> and look it up at openrbl.org to see which, if any, block lists the IP
> is in. if it's in the CBL or Spamhaus XBL, that usually indicates a
> compromised host.
>
> cheers,
> Jamie
> --
> Jamie Riden / jamesr (at) europe (dot) com [email concealed] / jamie.riden (at) computer (dot) org [email concealed]
> NZ Honeynet project - http://www.nz-honeynet.org/
>

They're not on the CBL/SBL or SORBS, or else I'd never have seen them

--
Tim Boyer
tim (at) denmantire (dot) com [email concealed]

------------------------------------------------------------------------
------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29. August 3 in Las Vegas.
World renowned security experts reveal tomorrow.s threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------
------

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus