Security Incidents mailing list archives

nimda subject line


From: Thomas Roessler <roessler () does-not-exist org>
Date: Thu, 20 Sep 2001 10:38:09 +0200

On incidents.org, they write that Nimda e-mail can easily be recognized by the long, ugly, repetitive subject headers.

This is not correct: Late on Sep 18, I received a Nimda-generated message with the subject line "Thank you". The payload was the same one you see everywhere else, with the usual four-byte variation.

--
Thomas Roessler                        http://log.does-not-exist.org/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com


Current thread: