General discussion

Locked

techrep email hijacked

By ZalTech ·
I have a domain so I when registering I always use the site as the "name"@XXX.XXX so I can tell who sold my email for bulk mailing.

Recently I have recently received literally a hundred emails to my Tech Republic email (techrep@XXX.XXX) regarding "password change". They all have the w32/sober.j@MM viral attachment, and the body is like so (from the most recent):

From: hostmaster@cuseeme-channel.com
Date: 6 Dec 23:54 (PST)
To: TechRep@XXX.XXX
Subject: Re: Registration confirmation <KEY:7875

Your password was changed successfully!

++++++ User-Service: http://www.cuseeme-channel.com
++++++ MailTo: postmaster@cuseeme-channel.com


*-*-* Mail_Scanner: No Virus
*-*-* XXX- Anti_Virus Service
*-*-* http://www.XXX.XXX

I do not get them to other emails I use only my techrep email. Has anyone else been experiencing this?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

i do the same thing - but no

by mike In reply to techrep email hijacked

i have not exp. this from tr, atleast not yet
are you sure you never used it in posting?

Collapse -

techrep email hijacked

by ZalTech In reply to i do the same thing - but ...

No. Never use it for anything, but logging in to this site.

However I am now wondering if maybe it was harvested a while back (would have been 10-12 months though) and just not used until now as I did get some worm (forget which) and was getting this kind of email back then to a few of my various addresses.

Collapse -

Re: Sober J

by house In reply to techrep email hijacked

This is a fairly new email virus that is spreading like a plague. It hijacks dns servers, and when it can't do that, it resorts to mass mailing.

I have not received anything from TR regarding this virus. At my ISP we've received many rejections from our mail daemon because this virus was found and removed. None of these have been valid emails or anything of the sort.

http://vil.nai.com/vil/content/v_130130.htm

* this worm harvests email addresses from infected systems

Back to Security Forum
3 total posts (Page 1 of 1)  

Related Forums