I just got one with content!
Well, sort of.
The HTML part contained a forged set of headers -- just the user-visible
ones you expect on an inline forward:
- Original Message -
From:
To: btxiberk@
Sent: Wednesday, February 1, 2006 11:33 AM
Subject: hey perl
That was it. (The target
- Original Message -
From: "mouss" <[EMAIL PROTECTED]>
To: "jdow" <[EMAIL PROTECTED]>
Cc:
Sent: Monday, January 30, 2006 2:01 PM
Subject: Re: hey john spam
jdow a écrit :
I'm watching them still roll in
seems they switched to "News fo
jdow a écrit :
>
> I'm watching them still roll in and have developed a theory about them.
> Suppose some "idiot" decides to play "white hat hacker" with a botnet
> he managed to commandeer or a set of open relays he managed to discover.
> So he sends these strange emails through those links with
jdow a écrit :
>
> I'm watching them still roll in and have developed a theory about them.
> Suppose some "idiot" decides to play "white hat hacker" with a botnet
> he managed to commandeer or a set of open relays he managed to discover.
> So he sends these strange emails through those links with
From: "MATSUDA Yoh-ichi" <[EMAIL PROTECTED]>
Hello.
From: "John Fleming" <[EMAIL PROTECTED]>
Subject: hey john spam
Date: Fri, 27 Jan 2006 19:48:03 -0500
This is a new one for me. Today I've received some mail with "hey john" in
the subject, a
From: "MATSUDA Yoh-ichi" <[EMAIL PROTECTED]>
Hello.
...
I received 2 similiar spams.
Then, I wrote rules below:
...
And now the bozoid has fixed his program and there is real spam content
in the messages so they are getting caught quite neatly.
{^_-}
On Fri, 27 Jan 2006, Thomas Cameron delivered in simple text monotype:
I wonder if perhaps it's just some sort of probe. Maybe they send out a
bunch of them and then make a note of the ones which don't bounce.
Those are then used for the "real" spam.
Thoughts?
<---snip--->
Nah, at least I do
Hello.
From: "John Fleming" <[EMAIL PROTECTED]>
Subject: hey john spam
Date: Fri, 27 Jan 2006 19:48:03 -0500
> This is a new one for me. Today I've received some mail with "hey john" in
> the subject, and the mail otherwise appears blank. It didn'
-
From: Thomas Cameron <[EMAIL PROTECTED]>
To: Spamassassin
Sent: Fri Jan 27 21:07:11 2006
Subject: Re: hey john spam
On Fri, 2006-01-27 at 17:13 -0800, Kelson wrote:
> John Fleming wrote:
> > This is a new one for me. Today I've received some mail with "hey john"
From: "John Fleming" <[EMAIL PROTECTED]>
This is a new one for me. Today I've received some mail with "hey john" in
the subject, and the mail otherwise appears blank. It didn't contain a
virus, or it would've been discarded by ClamAV.
Are these familiar to you guys? What's the point of the
On Fri, 2006-01-27 at 17:13 -0800, Kelson wrote:
> John Fleming wrote:
> > This is a new one for me. Today I've received some mail with "hey john"
> > in the subject, and the mail otherwise appears blank. It didn't contain
> > a virus, or it would've been discarded by ClamAV.
> >
> > Are these
John Fleming wrote:
This is a new one for me. Today I've received some mail with "hey john"
in the subject, and the mail otherwise appears blank. It didn't contain
a virus, or it would've been discarded by ClamAV.
Are these familiar to you guys? What's the point of them? Headers of
one be
This is a new one for me. Today I've received some mail with "hey john"
in the subject, and the mail otherwise appears blank. It didn't contain a
virus, or it would've been discarded by ClamAV.
Are these familiar to you guys? What's the point of them? Headers of one
below: Thanks! - John
This is a new one for me. Today I've received some mail with "hey john" in
the subject, and the mail otherwise appears blank. It didn't contain a
virus, or it would've been discarded by ClamAV.
Are these familiar to you guys? What's the point of them? Headers of one
below: Thanks! - John
14 matches
Mail list logo
