General discussion

Locked

spoofing?

By ssb_0227steve ·
I have started get warnings/notifications from strange and wonderfull places(places I have never sent e-mail) that I sent Sobig to them?
Macafee is up todate and clear. Stand alones have not found anything either. Whats going on?

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Yes to Spoof!

by mrbill- In reply to spoofing?

If I remember correctly the Sobig.F bug will infect a system and will send itself to address book of infected using a Spoofed return taken from the address book or created with the Admin@???.net/com. Someone that has you in their address book has the virus and their system is saying bad things about you, undeserved bad things. As long as you are clean be happy with the fact it is not you. If anyone starts blaming you send them to http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html that is Symantec?s page on Sobig.F.

Collapse -

Other ways

by Oz_Media In reply to Yes to Spoof!

HTML files are infected by sobig, this means that if your company website has a link to your email account, anyone who has visited and cached your webpages will be sending mail (appearing to come from you) to his/her addy book too.

I've been getting mail from people and companies I would NEVER have contacted, I also get 'spammed' by the idiots who have their mail systems set to respond to rejected mail. "Your email to blah, blah has been stripped of the attachment ...." This is almost as annoying as the spam. I wish more admins didn't have their heads up their A** and actually paid attention to things like this.

Oh well, it's a big **** off but at least I didn't get infected, the server I manage are fine (knock on wood) and their spam filters are working well so they aren't inundated with junk.

I've got all sorts of time to delete mail, I don't really care myself.

Collapse -

Many Thanks!

by ssb_0227steve In reply to Other ways

I suspected it was bull, butt was unsure enough to ask.
Thanks again.

Collapse -

Many Thanks!

by ssb_0227steve In reply to Other ways

I suspected it was bull, butt was unsure enough to ask.
Thanks again.

Collapse -

Many thanks

by ssb_0227steve In reply to Yes to Spoof!

I had an Idea that that was the problem.
"But for the grace of god" type of thing.
Thanks again.

Collapse -

Many Thanks!

by ssb_0227steve In reply to Yes to Spoof!

I suspected it was bull, butt was unsure enough to ask.
Thanks again.

Collapse -

mail relay

by jaboy78 In reply to spoofing?

mail relay
i got a mail relay server, let say domain @testing.com

this few days, i kept on receiving unknown mail (email not yet created on my e-mail server such as werew@testing.com, gflkj@testing.com) from unknown mail address..such as weerrerter@hotmail.com, dffgfdr@hotmail.com,ersfsdf@hotmail.com...etc. so my email-relay will reply to fgghdfg@hotmail.com which is an unknown mail (maildaemon)

One day can say more than 10,000 this type of mail that floods my email server.. and i cant track is from who??

How to control or to block this spam mail??


help me..i can..and i will give u 1000 point for sure

Collapse -

Easy resolution

by Oz_Media In reply to mail relay

Shut down your mail relay.

Back to Security Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums