[JA] Re: BuggyBear

  • From: rsgilmore@xxxxxxxx
  • To: juno_accmail@xxxxxxxxxxxxx
  • Date: Tue, 8 Oct 2002 14:54:47 -0400


Took a few hits yesterday & saw something wild -- maybe others have some
knowledge:

While dissecting headers from a double hit..  the "from"s  were different
& obviously spoofed...  original sending info (DNS etc) was identical,
and I'm able to ID the originating victim.. (matched to other clean
messages).

One hit came direct, the other via "list-owner" @ yahoogroups --  both
valid for me in his addy-book;  the spoofed addys are not there...  so,
is Bugbear known to create them as well ??

FWIW:  attachments included "resume.scr" (I'm not hiring), 
"winzip81.exe.exe", some URL, and others

No damage -- thankyou Juno 4.11...



To unsubscribe, send a message to ecartis@xxxxxxxxxxxxx with
"unsubscribe juno_accmail" in the body or subject.
OR visit //freelists.org
~*~



Other related posts: