[thelist] Spoofing and My Doom..... example

John C Bullas jcbullas at nildram.co.uk
Fri Jan 30 13:51:43 CST 2004


At 19:42 30/01/2004, you wrote
>Are you saying then that the worm possibly harvests emails from
>either the internet or from cached web pages?

I think since NO emails are ever sent out using this subdomain address
and it is in uncloaked form on the 3rd party page in question....

A RESOUNDING YES

FB


>--- John C Bullas <jcbullas at nildram.co.uk> wrote:
> > just as we were talking about spoofed outgoing addresses.......
> >
> > The email address below is one used for a car sale here:
> >
> > http://www.minimania.com/web/id/4389/ClassDetail.cfm
> >
> > on a well visited and spidered site :(
> >
> > this email address is NEVER used as an outgoing one AND the
> > network and PC were turned off at the wall......
> >
> > FB



More information about the thelist mailing list