virus mail

"Michael Damberger" <michael.damberger@t-online.de> wrote in message news:3257472.1086128247934.JavaMail.itn@is.intellij.net...
>I received bagel.y / bagel.z from

472388.1062583502266.JavaMail.itn@is.intellij.net

is it really from intellij or just a fake email?

Bye,
m.

I got one as wel:



From: 10307131.1062670168059.JavaMail.itn@is.intellij.net (Re: Msg reply)
-

lvmwqjwbrwyquvuuucky
Content-Type: text/html; charset="us-ascii"

"whois 200.224.18.221@whois.arin.net" (Getting contact from whois.arin.net )
Redirect to whois.lacnic.net :
Display data:
"whois 200.224.18.221@whois.lacnic.net" (Getting contact from whois.lacnic.net)
Redirect to whois.nic.br :
Display data:
"whois 200.224.18.221@whois.nic.br" (Getting contact from whois.nic.br)
Backup contact owner-c = rpv2
nic.br abuse address in remarks/descr field
teo8 = christiane.cuculo@equant.com
whois.nic.br found abuse contacts for 200.224.18.221 = christiane.cuculo@equant.com
whois: 200.224.18.192 - 200.224.18.223 = mail-abuse@nic.br, christiane.cuculo@equant.com
Routing details for 200.224.18.221
Using abuse net on mail-abuse@nic.br
abuse net nic.br = postmaster@nic.br, mail-abuse@nic.br, antispambr@abuse.net
Using best contacts postmaster@nic.br mail-abuse@nic.br antispambr@abuse.net
.......

Don't use real email addresses! Obviously they are collected and you
will get spam from everywhere.

Tom

well - too late ;)

I was wondering what exactly happened in that case.
What kind of backdoor is able to send email
with 472388.1062583502266.JavaMail.itn@is.intellij.net
as sender?

They just faked the sender. Standard spam.

Norris Shelton
Sun Certified Java Programmer




Michael Damberger wrote:

>well - too late ;)
>
>I was wondering what exactly happened in that case.
>What kind of backdoor is able to send email
>with 472388.1062583502266.JavaMail.itn@is.intellij.net
>as sender?
>

>

ok - still I'm curious. How is it working?
Someone sets up that "spam-machine", configuring somewhere
to send email from some fake *itn(at)is.intellij.net
to e.g. my email address.

Is it some human looked at the EAP forum, thinking - ok
let's send them emails with "intellij" somewhere in the
senders address - to trick them into opening the
attachement?

I'm just wondering about that amount of energy that
seems to be put into that...

IntelliSpam - I'm tempted to say... ;)

They have a spider that crawls the pages looking for e-mail address
patterns. Then they throw them in a huge list and SPAM. I guess they
are being a little more sophisticated and faking an address that they
know we would be familiar with

Norris Shelton
Sun Certified Java Programmer




Michael Damberger wrote:

>ok - still I'm curious. How is it working?
>Someone sets up that "spam-machine", configuring somewhere
>to send email from some fake *itn(at)is.intellij.net
>to e.g. my email address.
>
>Is it some human looked at the EAP forum, thinking - ok
>let's send them emails with "intellij" somewhere in the
>senders address - to trick them into opening the
>attachement?
>
>I'm just wondering about that amount of energy that
>seems to be put into that...
>
>IntelliSpam - I'm tempted to say... ;)
>

>