Hi Folks, Know the nasty virus is on the loose but look what we got today (I have replaced the user name of our employee with Jan.Doe):
========================================================================== From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 03, 2004 11:21 AM To: [EMAIL PROTECTED] Subject: Warning about your e-mail account. Hello user of Leesupply.net e-mail server, Some of our clients complained about the spam (negative e-mail content) outgoing from your e-mail account. Probably, you have been infected by a proxy-relay trojan server. In order to keep your computer safe, follow the instructions. Please, read the attach for further details. For security purposes the attached file is password protected. Password is "12510". Have a good day, The Leesupply.net team http://www.leesupply.net ========================================================================== and attached there is a 12KB file TextDocument.zip We obviously have no "[EMAIL PROTECTED]" address setup but this was definitely confusing users. Is there know way to track this source down ? If nothing else, this is a "head's up" for what your users are seeing and how confusing it could be to them... Thanks ! Chuck _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
