[ale] New mail trojan (this IS Linux-related)

Fulton Green ale at FultonGreen.com
Wed Apr 28 11:42:38 EDT 2004


On Wed, Apr 28, 2004 at 11:38:08AM -0400, Frank S. Glass wrote:
> Quoting Fulton Green <ale at FultonGreen.com>:
> 
> > I just received in my inbox a message sent from a Czech account
> > masquerading as an official EarthLink message with a suspicous payload.
> > Unlike most other mail trojans, this payload is in the form of a compiled
> > Perl script (assuming that's what the ".cpl" extension stands for).
> > 
> 
> I'll bite.  How is this Linux related?  Is there some Linux MUA that will run a
> script of this form directly or through Perl?

It's conceivable that someone could have a mailcap file configured to
have Perl interpret .cpl files (Charles Shapiro's recent comment
notwithstanding).



More information about the Ale mailing list