RE: Strange 4 MB Emails

From: Keith (keithat_private)
Date: Fri Jul 18 2003 - 05:42:30 PDT

  • Next message: Gustavo Kruel: "RES: Cisco IOS vulnerability"

    Try posting with full headers. It may give some hint.
    
    The [01/58] part looks like it is coming from a news group and there are 58
    parts to the file. OR it is picture 1 of 58 pictures in a set. Either way,
    that's bad for you.
    
    The only way for you to block this would be at your ISP level. Blocking at
    the client is obviously futile as it fills your box up anyhow.
    
    Keith.
    
    -----Original Message-----
    From: Dave [mailto:bzerobat_private] 
    Sent: Wednesday, July 16, 2003 11:09 PM
    To: incidentsat_private
    Subject: Strange 4 MB Emails
    
    
    For the last few hours, I've been getting one of these rather often. 
    
    ----- Original Message -----
    From: "Michael Joaquim" 
    To: (lots of people, including unfortunately me)
    Sent: Sunday, July 13, 2003 12:53 AM
    Subject: Katie Cooper Benefit Katie Cooper.tif [01/58]
    
    
    What is especially nasty about this is that there is a 3.66Mb file
    called 58] attached to each and every one of these messages. Apparently,
    there's 58 of them. 
    
    As you might imagine, a 10Mb mailbox gets filled pretty quickly 3.66Mb
    at a time, so I'm getting lots of messages from my ISP about that. If
    you've sent a message to me the last few hours, and it has bounced, this
    is why, sorry. 
    
    Anti-spam programs? I've tried two so far (Coffee Cup Spam Blocker, and
    Spam Catcher POP Anti-Spam), and it just laughs at them. 
    
    When you think about it, though, anti-spam programs can't really do any
    good here. These messages go into the mail server, and if three of them
    show up, the account is clogged until I retrieve them. The action needs
    to be done on the sending or the ISP server end. 
    
    I've done the abuseat_private already. Wrote to Erol's already. 
    
    Are any of you getting the same thing? Is there a new virus or trojan ?
    
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training
    sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's
    to 
    "underground" security specialists.  See for yourself what the buzz is
    about!  
    Early-bird registration ends July 3.  This event will sell out.
    www.blackhat.com
    ----------------------------------------------------------------------------
    
    
    
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Jul 18 2003 - 11:20:49 PDT