CRIME New: Re: Approved (Ref: 3394-65467)

From: Kuo, Jimmy (Jimmy_Kuo@private)
Date: Sun Jun 01 2003 - 11:48:07 PDT

  • Next message: Crispin Cowan: "Re: CRIME Interesting way around spam filter"

    There is now a SoBig.C running around this weekend.  The visually
    discernible difference is that it no longer comes from
    support@private, but other fake sender addresses.
    
    -----Original Message-----
    From: Kuo, Jimmy
    To: 'crime@private '
    Sent: 5/21/03 5:01 PM
    Subject: RE: CRIME Re: Approved (Ref: 3394-65467)
    
    Someone's infected with Palyh/Sobig.B.  (Eventually, it'll be renamed to
    Sobig.B.)
    
    This is the one that I warned about in my Sunday posting.  Looks like
    there's a bug that sends the email without the attachment, or are we
    stripping attachments via some sort of filter?
    
    (Someone with the headers want to look to see who sent it?)
    
    Jimmy
    
    -----Original Message-----
    From: support@private
    To: crime@private
    Sent: 5/21/03 3:44 PM
    Subject: CRIME Re: Approved (Ref: 3394-65467)
    
    All information is in the attached file.
    



    This archive was generated by hypermail 2b30 : Sun Jun 01 2003 - 12:01:26 PDT