Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!

From: Ejay Hire (Ejay.hireat_private)
Date: Fri Sep 14 2001 - 11:30:10 PDT

Next message: Nexus: "Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!"

Previous message: Nexus: "Re: Unscrupulous websites installing apps"
In reply to: Doru Petrescu: "HTMLZip 'compressed' HTML mail - virus or spam ?!?!"
Next in thread: Nexus: "Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!"
Reply: Nexus: "Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

It opens Cnn.com and in a hidden window it goes to a top-100 voting site and
votes for somebody... here is the page it opens...



----- Original Message -----
From: "Doru Petrescu" <pdoruat_private>
To: <vuln-devat_private>
Sent: Friday, September 14, 2001 5:11 AM
Subject: HTMLZip 'compressed' HTML mail - virus or spam ?!?!


>
> Hi everybody,
>
> This morning I received a message with subject 'AMERICA UNDER ATTACK' that
> contains a HTML part that contains some obfuscated JavaScript.
>
> This could be a virus or a SPAM (but I never seen such an obfuscated spam
> msg till now)
>
> if someone take the time to decript and analize please post result to the
> list.
>
>
> Best regards,
> Doru Petrescu
>
>
>
>

text/plain attachment: neattrick.txt

Next message: Nexus: "Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!"
Previous message: Nexus: "Re: Unscrupulous websites installing apps"
In reply to: Doru Petrescu: "HTMLZip 'compressed' HTML mail - virus or spam ?!?!"
Next in thread: Nexus: "Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!"
Reply: Nexus: "Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Sep 14 2001 - 10:49:25 PDT