PDA

View Full Version : Nasty


Abbadon
12-08-2003, 07:03 AM
I just opened a piece of mail that looked like a "return to sender by mailer daemon could not find adress"-type of mail. I get these fairly often since a lot of my friens swap mailaddys on a regular basis and I usualy open them to see who has "moved" this time.

Aparently, it was junkmail, offering me "Big Improvements In The Bedroom" or somesuch (whatever, don't need that anyway ;)).

Maybe this is common practice, but it's the first time I got junk that was disguised this way. Just thougt I'd spread the word...

jeeza
12-08-2003, 08:44 AM
Originally posted by Abbadon
Aparently, it was junkmail, offering me "Big Improvements In The Bedroom" or somesuch (whatever, don't need that anyway ;)).
Are you sure ? :D

PrntRhd
12-08-2003, 10:25 AM
Abbadon,

This type of bounced e-mail is usually due to someone with a virus on their PC and also had your address in it. They have their address list used by the virus which then spoofs e-mails to try to spread itself, sending messages out in any combination so it looks like you sent the message. The ISP detects the virus and bounces the e-mail to who they think sent the e-mail so it arrives in your inbox.
The "human engineering" to get you to open these e-mails can be varied, "reply to your e-mail" or "see Brittney and Madonna backstage" and messages like what you got.

Delete, Delete, Delete!!!!

Abbadon
12-08-2003, 10:53 AM
Originally posted by PrntRhd
Delete, Delete, Delete!!!!

You betcha! ;)

It just annoys me that now I won't know wether such a mail is a real bounced mail (like when someone has actually changed emailaddy) or some spam comming my way... :(

Oh well, people will just have to learn to notify me :p

Budfred
12-08-2003, 11:48 PM
I have been getting a few of those lately and they are not bounced, they are simply spoofing the Daemon type notice. I use MailWasher to screen them, so I am able to read the first part of the mail in addition to the size and address it is from. I delete those messages before I even download them off the server... You might want to think about installing MailWasher Abbadon...

Abbadon
12-09-2003, 03:19 AM
Thx for the suggestion Budfred, I'll dl it tonight.

*sigh*, another program to install & maintain :rolleyes: Those wicked spammers realy let me work for my email...

juniper
12-09-2003, 05:30 PM
this could be you that has the virus if you are getting e-mails from mailer-daemon then usually it is a virus like KLEZ that has its own SMTP engine and is trying to send from your PC and gets bounced back for whatever reason. These viruses also do as listed above and will look into your address book and replace the original sender with someone in you address book so it cant be easily found. cool thing is if you have a e-mail server you can see who the original sender was in the internet agent. as for mail scanners thats kool but make sure you are up to date with patches as some e-mail viruses dont even need to be opened to infect your machine by using outlook vulnerabilities and such.

Budfred
12-09-2003, 09:12 PM
The advantage to MailWasher is that you can screen the email in text only form before you download from the server. It obviously downloads a small amount of text to view, but any nasty stuff embedded in the message doesn't have a chance of getting through. Make sure that you set your email client to NOT automatically download emails though.....