[plug] MS Hoax letter

Sat Sep 20 11:36:35 WST 2003

we dumped a binary of it a couple days ago and found a GET URL and it was a hit counter, it was going up by a bout 20 a second and was at 300,000 last check

thats alot of infected machines

> Seem to be getting a lot of MS Hoax e-mails with executable attachments.  Has anyone on the list experienced the same.  I getting in the vicinity of about 1-2 per 10 minutes.
> 
> Just finished capturing packets to see what the hell is going on.  We use Mail Monitor and this is picking it up.
> 
> 
> 
> Thanks
> 
> Jon L. Miller, MCNE, CNS
> Director/Sr Systems Consultant
> MMT Networks Pty Ltd
> http://www.mmtnetworks.com.au
> 
> "I don't know the key to success, but the key to failure
>  is trying to please everybody." -Bill Cosby

Content-Description: HTML
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
> <META content="MSHTML 6.00.2800.1226" name=GENERATOR></HEAD>
> <BODY style="MARGIN-TOP: 2px; FONT: 10pt Arial; MARGIN-LEFT: 2px">
> <DIV>Seem to be getting a lot of MS Hoax e-mails with executable 
> attachments.  Has anyone on the list experienced the same.  I getting 
> in the vicinity of about 1-2 per 10 minutes.</DIV>
> <DIV> </DIV>
> <DIV>Just finished capturing packets to see what the hell is going on.  We 
> use Mail Monitor and this is picking it up.</DIV>
> <DIV> </DIV>
> <DIV> </DIV>
> <DIV> </DIV>
> <DIV>Thanks</DIV>
> <DIV> </DIV>
> <DIV>Jon L. Miller, MCNE, CNS<BR>Director/Sr Systems Consultant<BR>MMT Networks 
> Pty Ltd<BR><A 
> href="http://www.mmtnetworks.com.au">http://www.mmtnetworks.com.au</A></DIV>
> <DIV> </DIV>
> <DIV>"I don't know the key to success, but the key to failure<BR> is trying 
> to please everybody." -Bill Cosby</DIV>
> <DIV> </DIV>
> <DIV> </DIV></BODY></HTML>


_______________________________________________
plug mailing list
plug at plug.linux.org.au
http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug