[OPE-L:7762] Re: don't open attachment to [7756]

From: Allin Cottrell (cottrell@wfu.edu)
Date: Sun Oct 06 2002 - 23:23:22 EDT


On Sun, 6 Oct 2002, gerald_a_levy wrote:

> I have been informed that it contains a virus.  

Indeed.  Here is an account of the operation of "bugbear" -- the worm 
responsible for the recent "re-sending" of old OPE-L messages to some 
list members.  Cf. http://www.f-secure.com/bugbear/

"The worm can pick up old e-mail messages from an infected system and
send them to random e-mail addresses. This means that private e-mails
will be disclosed to third parties. Forwarding old e-mails is actually
a social engineering trick - When people receive such e-mails, they
will be baffled by the contents. In many cases they will click on the
file attachment just to figure out what the strange e-mail is all
about - thereby becoming infected."

Allin Cottrell.


This archive was generated by hypermail 2.1.5 : Tue Oct 08 2002 - 00:00:01 EDT