Re: lots of sobig virus emails.

From: Valdis.Kletnieksat_private
Date: Tue Aug 19 2003 - 21:30:06 PDT

  • Next message: Valdis.Kletnieksat_private: "Re: Increasing ICMP Echo Requests"

    On Tue, 19 Aug 2003 09:44:15 PDT, wirepair <wirepairat_private>  said:
    > because i'm not infected. It also looks like i'm getting a ton from 'security peoples' email addresses. 
    > sans/securityfocus.com/other people. Maybe someone released the virus using a list of people from security lists?
    
    Nothing that devious... :)
    
    *YOU* are getting a ton from "security people" because the people you are
    getting copies from have security people's addresses in their mail folders.
    Some poor Microsoft-using drudge gets infected, it trolls the folders, spams
    using what addresses it finds - and due to "locality of reference", you'll get
    mostly security-related addresses because that's the crowd you hang with.
    
    Remember, if you get a Sobig-F claiming to be from somebody, all that *really*
    means is that the *real* problem user has both you and that somebody in their
    mail folders someplace...
    
    Meanwhile, over on the dachsund-breeders list, everybody is wondering why the
    virus was released with a bunch of dachsund owners as the list, and the
    canoe-builders list is getting hammered by addresses from outdoor-activity
    lists, and so on....
    
    
    
    



    This archive was generated by hypermail 2b30 : Wed Aug 20 2003 - 16:27:10 PDT