-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Tue, 23 Apr 2002, Chuq Von Rospach wrote:
This one has the possibility to get really ugly and nasty, folks, because it's hijacking addresses. Users can't depend on being yelled at by friends for being infected, because this new worm hides behind random return addresses. Which means the only thing you know is that the "person" sending you the email isn't the one infected, but someone who knows both of you is...
The return-path header however seems to be 'correct'. I was able to use that to track back the actual infected user, even when it masqueraded as being from one of the lists I am on. Hopefully this helps other people track this back as well and at least inform the correct person that they are infected.
- --JT
[-------------------------------------------------------------------------] [ Practice random kindness and senseless acts of beauty. ] [ It's hard to seize the day when you must first grapple with the morning ] [-------------------------------------------------------------------------] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org
iD8DBQE8xaC1lZQYYI16LJQRAvoDAJ9OJXJR6CO/PhaZ/QJuv/r0zUuxJwCfYVbh ld7T9CZ90dShV4JNHzyPxQ4= =Y/i2 -----END PGP SIGNATURE-----