OK, but is it generating usernames or collecting them? Keith Purtell, Web/Network Administrator VantageMed Corporation (Kansas City office)
CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Colbeck, Andrew > Sent: Wednesday, June 16, 2004 11:43 AM > To: '[EMAIL PROTECTED]' > Subject: RE: [Declude.JunkMail] Possible spammer trick with names > > > The odds are 100%, Keith. > > That's exactly how all the current viruses work. Recently, > WORM_SOBER.* has > also generated usernames at the domains it harvests to > increase their hit > rate, because they don't care about their failure rate or the > massive number > of NDRs that they generate. > > Andrew 8) > > -----Original Message----- > From: Keith Purtell [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 16, 2004 9:03 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Possible spammer trick with names > > > I've recently noticed several instances where spam was sent > to my home email > account and the subject > line contained the first names of friends with whom I > occasionally exchange > email. Not common names > like Bill or Susan, but relatively unusual names. It could be > just spammers > luck that they used > names I recognized. But I wonder ... if a virus/worm can collect email > addresses on an infected > device, could it not also collect names and use them in the spamming > process? What are the odds? > > Keith Purtell, Web/Network Administrator > VantageMed Corporation (Kansas City office) > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
