[ale] Apparently used in spam or virus distribution

attriel attriel at d20boards.net
Tue Aug 19 11:00:30 EDT 2003


> This morning I received two notices from UK recipients to the effect that
> mail from me contained suspect attachments, identified in one case as a
> PIF file.
>
> As I am not aware of sending any mail to these recipients and do not have
> copies of the suspect mail, I can't tell whether they represent a
> compromise of my Linux-2.4.20 system, the Pine newsreader, fetchmail,
> sendmail, or some other link of the chain.
>
> Any suggestions for learning if this is really my problem?

Most likely you sent mail to someone who got infected and it's spoofing
the From:

virus writers figured out how to do that a year or two back and it's
become quite popular since it completely botches the trace path :/

--attriel
_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale





More information about the Ale mailing list