Ransom ware outbreak, but wondering why they aren't generating RFC
compliant headers..
Unless of course, the operating system there is compromised.
Return-Path: <nanettebttbu...@gmail.com>
Received: from smtp.rediffmailpro.com (HELO smtp.rediffmailpro.com)
(122.169.113.172)
by fe1.cityemail.com with SMTP
(b70422d6-7916-11e7-b59f-1f8d7727941e); Fri, 04 Aug 2017 06:13:35 -0700
Content-Type: multipart/mixed;
boundary=Apple-Mail-D45AC243-3753-9EB9-7327-C43F11E04639
Content-Transfer-Encoding: 7bit
From: nanette busst <nanettebttbu...@gmail.com>
Mime-Version: 1.0 (1.0)
Date: Fri, 04 Aug 2017 18:43:31 +0530
Subject: IMG_9786.BMP
Message-Id: <0382c199-0d6b-69d0-3043-de000af74...@gmail.com>
Appears to be standard BOT style ransomware that is going around, but
the rediff email servers should of course be adding a received header,
when it accepts a message from another system.
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
------------------------------------------------------------------------
A Wizard IT Company - For More Info http://www.wizard.ca
"MagicSpam" is a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and
intended solely for the use of the individual or entity to which they
are addressed. Please note that any views or opinions presented in this
email are solely those of the author and are not intended to represent
those of the company.
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
------------------------------------------------------------------------
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
