Security

Ask something
Discussion Locked

techrep email hijacked

0 helpful
3 replies

by zaltech

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a domain so I when registering I always use the site as the "name"@XXX.XXX so I can tell who sold my email for bulk mailing.

Recently I have recently received literally a hundred emails to my Tech Republic email (techrep@XXX.XXX) regarding "password change". They all have the w32/sober.j@MM viral attachment, and the body is like so (from the most recent):

From: hostmaster@cuseeme-channel.com
Date: 6 Dec 23:54 (PST)
To: TechRep@XXX.XXX
Subject: Re: Registration confirmation

3 replies

by mike

i have not exp. this from tr, atleast not yet
are you sure you never used it in posting?

by zaltech

No. Never use it for anything, but logging in to this site.

However I am now wondering if maybe it was harvested a while back (would have been 10-12 months though) and just not used until now as I did get some worm (forget which) and was getting this kind of email back then to a few of my various addresses.

by house

This is a fairly new email virus that is spreading like a plague. It hijacks dns servers, and when it can't do that, it resorts to mass mailing.

I have not received anything from TR regarding this virus. At my ISP we've received many rejections from our mail daemon because this virus was found and removed. None of these have been valid emails or anything of the sort.

http://vil.nai.com/vil/content/v_130130.htm

* this worm harvests email addresses from infected systems

This discussion is closed to new replies.