News Focus
News Focus
icon url

Zeev Hed

08/23/03 3:02 PM

#144029 RE: Mattu #144022

Actually, I am starting to get "rejected e-mail" which I supposedly sent (and from my attbi.com address which I have not used for months now) to people I don't even know and I don't have on my e-mail list. I simply delete these as they come (one of them had a .pif attachment, which of course I discarded, it is definitely associated with the sobig). I think my e-mail address was simply scooped out and set as an artificial sender in this virus attack.... Some of the "non deliverable" are to "wrong address", others are returned because the target IP identified a virus and would not forward. Frankly, a lot of wasted time on that thing.
icon url

TREND1

08/23/03 3:12 PM

#144030 RE: Mattu #144022

Actually, I am getting e-mail which I supposedly sent too.
Knowing I did not sent it(g).
I just delete it also.



icon url

TonyMcFadden

08/23/03 9:21 PM

#144082 RE: Mattu #144022

Matt, I've been getting 2 or 3 a day... someone/thing is scooping addresses off the 'net and stuffing them in the 'reply to:' field of the emails. When you think about it, email is a prety unsecure medium. All ISP's should require secure login to send, as well as receive. I NEVER get spoofed like this on my attglobal account.

Anyway, thanks for the link to the sobig fix (that you posted in another of your posts). I DID confirm I don't have it. (I would flog myself for a week if I did. I know better)
icon url

jdaasoc

08/23/03 10:11 PM

#144090 RE: Mattu #144022

I have gotten, like everybody else, hundreds of copies of this virus

No I only get 2-4 copies a day from addresses I don't deal with.

I gave you IP address of who sent me a copy of sobig with your email address as the "from" address.

You got a little credibility issue with me how anyone in KS got your email addresses as "from" address and mine as "to" address unless that data came from you guys since your email address is not in any of my outlook contact lists.

The email appears to come from hostname FRONTDESK at mokancomm.net

How far is louisburg KS from where you are in MO.

<ip address/hostname>
216.163.101.226
dial-216-163-101-226.mokancomm.net
Host reachable, 66 ms. average

<net block>
216.163.101.0 - 216.163.101.255

<owner>
Mokan
506 South 2nd Street
Louisburg
KS
66053
United States

<technical contact>
Moringello, Linda
+1-703-787-7781
lmoringello@nrtc.org

<additional data>
NETBLK-NRTC-MOKAN1
Created: 2002-12-16
Updated: 2002-12-16
Source: whois.arin.net