North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Re: FW: Worm probes

  • From: Frank Coluccio
  • Date: Tue Sep 18 15:27:51 2001 
re  < readme.exe > :

http://www.cert.org/current/current_activity.html#port80

> 
> > There is also an email vector where README.EXE is sent via email to
> > numerous accounts.  
> 
> It also seems to set the from address in both the envelope and
> header to an address, possibly from the address book(?).  I've seen
> a number of bounces come back to one of our NOC addresses, and a
> couple of reports from humans. :(
> 
> Rob
>