[ale] Interesting trojan attempt?

[L. Wayne James]

I noted some speculation on another list that addresses may be being 
harvested from bugzilla.

David S. Jackson wrote:

>On Sun, Aug 03, 2003 at 02:54:11PM -0700 Kevin Karst <kevinkarst at yahoo.com> wrote:
>  
>
>>this message.zip is popular currently ..
>>it is harmful software and there is information on the
>>net about it.
>>    
>>
>[...]
>
>What I'd like to know is, how did they come up with
>sylvester.dsj.net.  Near as I can see, no external zone XFER was
>made from my network.  I used to have sylvester MXed with my old
>provider, but that was a couple of years ago now.  Could he have
>just gotten an old email or something off an archive or
>something?  I guess that's it.
>
>  
>
>>>----- Forwarded message from admin at sylvester.dsj.net
>>>-----
>>>
>>>Received: from localhost (dsj at localhost [127.0.0.1])
>>>	by sylvester.dsj.net (8.12.3/8.12.3/Debian-5) with
>>>ESMTP id h7385pXI009561
>>>	for <dsj at localhost>; Sun, 3 Aug 2003 04:38:42 -0400
>>>Received: from pop.dsj.net [207.217.120.137]
>>>	by localhost with POP3 (fetchmail-5.9.11)
>>>	for dsj at localhost (single-drop); Sun, 03 Aug 2003
>>>04:38:42 -0400 (EDT)
>>>Received: from localhost ([211.110.44.18])
>>>	by tern (EarthLink Mail Service) with SMTP id
>>>19Jdzq2Bj3NZFmh0
>>>	for <dsj at dsj.net>; Sun, 3 Aug 2003 00:46:18 -0700
>>>(PDT)
>>>From: admin at sylvester.dsj.net
>>>To: Dsj <dsj at dsj.net>
>>>Reply-To: admin at sylvester.dsj.net
>>>X-Mailer: The Bat! (v1.61)
>>>X-Priority: 2 (High)
>>>Subject: your account                        
>>>vjovvlov
>>>MIME-Version: 1.0
>>>Content-Type: multipart/mixed;
>>>boundary="----------5B228CBD052294B"
>>>Message-Id: <200308030046.19Jdzq2Bj3NZFmh0 at tern>
>>>Date: Sun, 3 Aug 2003 00:46:18 -0700 (PDT)
>>>Status: RO
>>>Content-Length: 29765
>>>Lines: 402
>>>
>>>
>>>Hello there,
>>>
>>>I would like to inform you about important
>>>information regarding your
>>>email address. This email address will be expiring.
>>>Please read attachment for details.
>>>
>>>---
>>>Best regards, Administrator
>>>vjovvlov
>>>      
>>>
>
>
>  
>

_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale