[Mailman-Developers] Re: New emerging virus/worm. Grr.
JT
jtraub@dragoncat.net
Tue, 23 Apr 2002 10:58:12 -0700 (PDT)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue, 23 Apr 2002, Chuq Von Rospach wrote:
> This one has the possibility to get really ugly and nasty, folks,
> because it's hijacking addresses. Users can't depend on being yelled at
> by friends for being infected, because this new worm hides behind random
> return addresses. Which means the only thing you know is that the
> "person" sending you the email isn't the one infected, but someone who
> knows both of you is...
The return-path header however seems to be 'correct'. I was able to use
that to track back the actual infected user, even when it masqueraded as
being from one of the lists I am on. Hopefully this helps other people
track this back as well and at least inform the correct person that they
are infected.
- --JT
- --
[-------------------------------------------------------------------------]
[ Practice random kindness and senseless acts of beauty. ]
[ It's hard to seize the day when you must first grapple with the morning ]
[-------------------------------------------------------------------------]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE8xaC1lZQYYI16LJQRAvoDAJ9OJXJR6CO/PhaZ/QJuv/r0zUuxJwCfYVbh
ld7T9CZ90dShV4JNHzyPxQ4=
=Y/i2
-----END PGP SIGNATURE-----