How stupid do they think I am?!

[cellio]

From a bogus "support" address:

Dear user, the management of Uj.edu mailing system wants to let you know
that,

Some of our clients complained about the spam (negative e-mail content)
outgoing from your e-mail account. Probably, you have been infected by
a proxy-relay trojan server. In order to keep your computer safe,
follow the instructions.

For more information see the attached file.

Have a good day,
The Uj.edu team http://www.uj.edu

Comments

[ralphmelton.livejournal.com]

I got one myself:

Dear user, the management of Cmu.edu mailing system wants to let you know that,

Your e-mail account has been temporary disabled because of unauthorized access.

For details see the attached file.

For security purposes the attached file is password protected. Password is "08861".

Best wishes,
The Cmu.edu team http://www.cmu.edu

I've heard that the password protection on the payload is challenging automated virus detection, because it's hard for the automated system to inspect the payload.

[cellio]

I got one of those "your account has been disabled" ones recently too (from some place where I've never had an account). Mine had the password-protection thing too; I didn't realize it was real. I thought it was just fluff to make the message seem more authentic to the careless. If it's really password-protected and that screws up virus detection, that's clever. Annoying, but clever. :-)

[ralphmelton.livejournal.com]

I'm just making claims on the basis of one remark whose source I can't even remember. I haven't tried opening the zip file, because, y'know, I'm not that curious.

[cellio]

Someone I know was going to pop it open under Linux and look around out of curiosity, but I haven't yet heard what he found. I'm not that curious either.