cellio: (spam)
Monica ([personal profile] cellio) wrote2004-03-03 10:54 am
  • Add Memory
  • Share This Entry
Entry tags:

How stupid do they think I am?!

From a bogus "support" address:

Dear user, the management of Uj.edu mailing system wants to let you know
that,

Some of our clients complained about the spam (negative e-mail content)
outgoing from your e-mail account. Probably, you have been infected by
a proxy-relay trojan server. In order to keep your computer safe,
follow the instructions.

For more information see the attached file.

Have a good day,
The Uj.edu team http://www.uj.edu
Flat | Top-Level Comments Only

[identity profile] zare-k.livejournal.com 2004-03-03 08:10 am (UTC)(link)
Oh, interesting. I got a variant of this as well. It was very nice about providing detailed instructions on how to manipulate the enclosed zip file. I think it's cute that they're sending such old-school spam.
cellio: (spam)

[personal profile] cellio 2004-03-03 08:15 am (UTC)(link)
Yup! Sometimes the low-tech approach is easiest. :-)

These particular virus-propegators are incompetent, though; there was no attached file to look at from the safety of a Unix machine.
geekosaur: orange tabby with head canted 90 degrees, giving impression of "maybe it'll make more sense if I look at it this way?" (Default)

[personal profile] geekosaur 2004-03-03 08:15 am (UTC)(link)
It's one of the newer variants of the "Beagle" virus. Feh.
cellio: (spam)

[personal profile] cellio 2004-03-03 08:18 am (UTC)(link)
Oh, I'm sure it's a virus (or would have been if they'd remembered to attach the file). I'm mildly amused by the "here, this will fix your virus" ploy (when I don't have a virus and didn't send them mail). I guess there are still enough people out there who'll fall for this that it's worth it to them to send such mail. Shrug.
geekosaur: orange tabby with head canted 90 degrees, giving impression of "maybe it'll make more sense if I look at it this way?" (Default)

[personal profile] geekosaur 2004-03-03 08:21 am (UTC)(link)
There are enough people that will fall for it that it's posing a serious problem for network administrators. :(

[identity profile] ralphmelton.livejournal.com 2004-03-03 08:33 am (UTC)(link)
I got one myself:


Dear user, the management of Cmu.edu mailing system wants to let you know that,

Your e-mail account has been temporary disabled because of unauthorized access.

For details see the attached file.

For security purposes the attached file is password protected. Password is "08861".

Best wishes,
The Cmu.edu team http://www.cmu.edu


I've heard that the password protection on the payload is challenging automated virus detection, because it's hard for the automated system to inspect the payload.
cellio: (spam)

[personal profile] cellio 2004-03-03 08:41 am (UTC)(link)
I got one of those "your account has been disabled" ones recently too (from some place where I've never had an account). Mine had the password-protection thing too; I didn't realize it was real. I thought it was just fluff to make the message seem more authentic to the careless. If it's really password-protected and that screws up virus detection, that's clever. Annoying, but clever. :-)

[identity profile] ralphmelton.livejournal.com 2004-03-03 08:44 am (UTC)(link)
I'm just making claims on the basis of one remark whose source I can't even remember. I haven't tried opening the zip file, because, y'know, I'm not that curious.
cellio: (spam)

[personal profile] cellio 2004-03-03 08:53 am (UTC)(link)
Someone I know was going to pop it open under Linux and look around out of curiosity, but I haven't yet heard what he found. I'm not that curious either.

[identity profile] arib.livejournal.com 2004-03-03 08:33 am (UTC)(link)
I got the same message yesterday. Clever, if it'd actually work.
geekosaur: orange tabby with head canted 90 degrees, giving impression of "maybe it'll make more sense if I look at it this way?" (Default)

[personal profile] geekosaur 2004-03-03 08:44 am (UTC)(link)
It's working well enough that it's spreading :(

[identity profile] tashabear.livejournal.com 2004-03-03 09:53 am (UTC)(link)
Holy crap, I just got one on a Yahoo!groups mailing list. Thank goodness it strips attachments, or there'd be a lot of propagatin' going on.

[identity profile] ichur72.livejournal.com 2004-03-03 10:17 am (UTC)(link)
For a while AOL was absolutely overrun with messages such as these -- most of them purporting to be from customer service but really designed to extract credit card info. One thing that struck me about these messages was that they were almost always packed with with misspellings and bad grammar. Is there some rule that makes spam-sending cause you to lose IQ points?
cellio: (spam)

[personal profile] cellio 2004-03-03 11:37 am (UTC)(link)
Is there some rule that makes spam-sending cause you to lose IQ points?

I've been assuming, without investigation, that a fair bit of this junk originates in places where English isn't the dominant language.

[identity profile] psu-jedi.livejournal.com 2004-03-03 10:42 am (UTC)(link)
It's real enough, and my IT support at my employer has been sending out messages this morning warning us not to open any zip file that contains a password. As mentioned, it's to get around the auto virus detect. I haven't gotten any yet, but I'm assuming a bunch of people have, else they wouldn't have sent the warning.
cellio: (spam)

[personal profile] cellio 2004-03-03 11:38 am (UTC)(link)
I just got the "c'mon; we're not that lame and it didn't really come from us" message from my provider, too.

[personal profile] rectangularcat 2004-03-03 01:42 pm (UTC)(link)
I got that one this morning as well. Wonder if they hacked into LJ?
cellio: (spam)

[personal profile] cellio 2004-03-03 02:33 pm (UTC)(link)
I have gotten spam to my LJ address, but this particular one went to pobox.
Flat | Top-Level Comments Only