Results 1 to 3 of 3
  1. #1
    Join Date
    Nov 2001
    New York / New Jersey

    Convincing Email Worm ** Beware

    We have noticed the following email hit all of our servers using Qmail and Horde.

    Warn your users that you would never send messages of this nature, and not to open this zip file. It is a virus.

    ----- Forwarded message from [email protected] -----
    Date: Sat, 06 Mar 2004 01:19:13 -0500
    From: [email protected]
    Reply-To: [email protected]
    Subject: E-mail account security warning.
    To: [email protected]

    Dear user, the management of mailing system wants to let you
    know that,

    Your e-mail account will be disabled because of improper using in next
    three days, if you are still wishing to use it, please, resign your
    account information.

    For details see the attached file.

    For security reasons attached file is password protected. The password is

    The team

    ----- End forwarded message -----

    This mail sent through IMP:

    Attachment 1: (16KB) 0-1 a
    Type: application/x-zip-compressed
    Encoding: base64 Download
    Last edited by lostpacket; 03-06-2004 at 03:16 PM.

  2. #2
    Join Date
    Apr 2001
    Palm Beach, FL
    It's not an exploit but a worm. Just advise your customers to keep their AV up to date.

    This has been going on for several days now. It is quite convincing, IMO.
    Alex Llera
    Professional Server Management

  3. #3
    This is the Bagle.F MM (MassMailing) Worm
    Uses some of that social engineering.
    Hopefully users will be smart enough to ask questions.

    You should probably send out an email to all your clients.

    Many of the AV were unable to detect it at the internet level.
    Due to being password protected. Some scanners are smarter and can try and guess the password from the text in the body.
    Datums Internet Solutions, LLC
    Systems Engineering & Managed Hosting Services
    Complex Hosting Consultants

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts