Took a few hits yesterday & saw something wild -- maybe others have some knowledge: While dissecting headers from a double hit.. the "from"s were different & obviously spoofed... original sending info (DNS etc) was identical, and I'm able to ID the originating victim.. (matched to other clean messages). One hit came direct, the other via "list-owner" @ yahoogroups -- both valid for me in his addy-book; the spoofed addys are not there... so, is Bugbear known to create them as well ?? FWIW: attachments included "resume.scr" (I'm not hiring), "winzip81.exe.exe", some URL, and others No damage -- thankyou Juno 4.11... To unsubscribe, send a message to ecartis@xxxxxxxxxxxxx with "unsubscribe juno_accmail" in the body or subject. OR visit //freelists.org ~*~