March 04, 2004
Cheeky cheeky spammers

Received in the mailbox with a Windows PIF file attached:

Subject: Notify about your e-mail account utilization.

Parts/Attachments:
1 Shown 10 lines Text
2 12 KB Application
----------------------------------------

Dear user of "Jacobsen.no" mailing system,

Our main mailing server will be temporary unavaible for next two days,
to continue receiving mail in these days you have to configure our free
auto-forwarding service.

For more information see the attached file.

Best wishes,
The Jacobsen.no team http://www.jacobsen.no

Incidentally, I happen to be the jacobsen.no team, so I know this is a fake, probably intended to pass me a virus, open up my PC to send spam emails or something similar.

I could imagine a lot of users falling for this scam...

Users anywhere: virus-check all email attachments. If in doubt about an email apprearing to be from a systems administrator - check with your admin before running anything!

Sponsored links
Related Entries
Comments

F-secure's weblog has very good up-to-date information on the virus war that is raging quite heavily. I made an RSS feed to it, so I can constantly follow it and keep myself up-to-date as well.

It is available for free download @ http://www.vilpponen.net/antti/rss.php

F-secure's weblog: http://www.f-secure.com/weblog/

Posted by: Antti Vilpponen on March 4, 2004 02:40 PM

Nasty!

Posted by: Remco on March 4, 2004 04:12 PM

A few hours after I commented here - F-Secure began offering their own RSS feed. Here it is: http://www.f-secure.com/weblog/weblog.rdf

Posted by: Antti Vilpponen on March 4, 2004 04:34 PM

I got this version:

Dear user, the management of Bergersen.net mailing system wants to let you know that,

Some of our clients complained about the spam (negative e-mail content)
outgoing from your e-mail account. Probably, you have been infected by
a proxy-relay trojan server. In order to keep your computer safe,
follow the instructions.

Pay attention on attached file.

Have a good day,
The Bergersen.net team http://www.bergersen.net

Posted by: Jarle on March 4, 2004 05:44 PM

Got the same thing from my university today. Just to make sure I sendt an e-mail to the postamaster there who, not surprisingly, told me it was a virus.

If this went out to all students at Copenhagen University today I can imagine loads of people running the attached .exe file..

Posted by: Vegard on March 4, 2004 07:00 PM

Anders:

Wondering how you were able to read my blog, but thanks for posting the info. We'll have to see how this actually turns out, but the more I think about it it sounds more like an urban legend. Perhaps all the blogging will get the US Treasury's attention.

Posted by: Naotake on March 4, 2004 10:08 PM

Anders:

Wondering how you were able to read my blog, but thanks for posting the info. We'll have to see how this actually turns out, but the more I think about it it sounds more like an urban legend. Perhaps all the blogging will get the US Treasury's attention.

Posted by: Naotake on March 4, 2004 10:09 PM

Hi Anders,
saw you comment in my blog - you say we met 5 years ago, but I have a shocking memory (and many students) so I am afraid it has disappeared from my mind (and I couldn't find your CV on your website without registering....). Apertura?

Posted by: Espen on March 8, 2004 10:38 PM
Post a comment
Name:


Email:
(Will not be displayed if you enter a website below. Otherwise, it will be displayed "spam protected")


Website:
(if you have one)


What do you want to say?
(please don't bother posting "spam" (pornography, viagra-sales etc - I will delete such comments anyway))


Remember info?



Referrers to this page
TrackBack URL for this entry:
http://www.jacobsen.no/cgi-sys/cgiwrap/anders/MT/mt-tb.cgi/780
jdb cyberspace: Clever e-mail virus (March 4, 2004 05:49 PM)
"I recived this e-mail today, with an attached file called "Readme.pif". Dear user, the management of Bergersen.net mailing system wants to let you know that,..."
CompHobby.org: A few things recently..... (March 8, 2004 01:05 AM)
"First of all I would like to apologize for CompHobby's intermittent outages and would like to state the problems were..."

48379 visits (4 today, 7 this week)

© Anders Jacobsen
[weblog / photography]