Thread: strange email

Info:

Sender: [email protected]
Subject: RE: Returned for Virus; was; thank you
Attachments: 2


I deleted it because I AM [email protected] and i didnt send that. Anyone else got any emails like this?

Someone probably sent out sobig.F in your name. It spoofs the reply-to address, so they think you sent the virus.

right before i read this i had run the release from norton that removes that virus and my pc was clean so i guess im ok.

Here's how I understand it:

The sobig virus works around 3 people. You have person A, B, and C. Person A and B don't necessarily know each other, but person C knows both A and B. The virus sends out an email FROM person C, but it is spoofed to appear as though person A sent it to person B and got returned.

Now, where it get's bad is if a spammer get's this virus. Their address books of course are quite large, so it can go crazy sending this stupid thing all over the place.

I get about 10 of this things a day, and neither of my computers are infected.... and I use hotmail... such a pain.

You know, you never really know who it comes from or anything, it's so easy for even a kid to forge e-mails through telnet.

Originally posted by Leeman_s
You know, you never really know who it comes from or anything, it's so easy for even a kid to forge e-mails through telnet.

That's old news. These days, due to spammers, that's practically impossible. Even on the few Sendmail servers that still allow forwarding, it gives them your IP address in the X-Apparently-From field. But with the sobig-F worm, I think you can send email by connecting to an infected machine.