Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Netsky.P -> sneaky one!
From: Joe Matusiewicz <joem () nist gov>
Date: Tue, 23 Mar 2004 08:50:56 -0500

At 05:44 AM 3/23/2004, Andrew Aris wrote:
Hi all,

just had a mail throught that NAV has detected as being Netsky.P, the text
of the mail was:

From: jaume () megacceso com [mailto:jaume () megacceso com]
Sent: 23 March 2004 08:24
To: ****
Subject: Re: approved information

Authentication required.

+++ Attachment: No Virus found
+++ MC-Afee AntiVirus - www.mcafee.com

I thought the "MC-Afee" bit was a nice touch, might just convince a fair few

I saw one a even better...the From: address was support () symantec com They were supposedly using their competitor's product -- Mc-Afee (sic) -- for their virus scanning.

-- Joe

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]