[Esd-l] Worm attacking ESD admin address

Mon Apr 22 19:44:01 PDT 2002

On Mon, 22 Apr 2002 esd-l-request at spconnect.com wrote:

> Date: Mon, 22 Apr 2002 07:15:02 -0700
> From: esd-l-request at spconnect.com
> To: jhardin at impsec.org
> Subject: Mailman results for Esd-l
> 
> This is an automated response.
> 
> There were problems with the email commands you sent to Mailman via
> the administrative address <esd-l-request at spconnect.com>.
> 
> To obtain instructions on valid Mailman email commands, send email to
> <esd-l-request at spconnect.com> with the word "help" in the subject line
> or in the body of the message.
> 
> If you want to reach the human being that manages this mailing list,
> please send your message to <esd-l-admin at spconnect.com>.
> 
> The following is a detailed description of the problems.
> 
> >>>>> Subject line ignored:
> >>>>>   Worm Klez.E immunity
> Command? --S6149mK8F3YODLF35LGHV59U651
> Command? Content-Type: text/html;
> Command? Content-Transfer-Encoding: quoted-printable
> Command? <HTML><HEAD></HEAD><BODY>
> >>>>> 
> >>>>> Too many errors encountered; the rest of the message is ignored:
> > 
> > <FONT>Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files.<br>
> > Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.<br>
> > We developed this free immunity tool to defeat the malicious virus.<br>
> > You only need to run this tool once,and then Klez will never come into your PC.<br>
> > NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it.<br>
> > If so,Ignore the warning,and select 'continue'.<br>

{snip}

Social engineering... "ignore the warning" indeed.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                       pgpk -a jhardin at wolfenet.com
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
 "They [media giants] have no idea how to do business with resourceful
  human beings rather than passive vegetables. So they run to [the]
  government for protection."
                    -- Doc Searls on the SSSCA, in Linux Journal
-----------------------------------------------------------------------
   925 days until the Presidential Election