Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > Python > RE: E-mail account disabling warning.

Reply
Thread Tools

RE: E-mail account disabling warning.

 
 
Tim Peters
Guest
Posts: n/a
 
      03-03-2004
It shouldn't need to be said, but if you get a message that looks like this:

> Dear user of Python.org gateway e-mail server,
>
> We warn you about some attacks on your e-mail account. Your
> computer may contain viruses, in order to keep your computer and
> e-mail account safe, please, follow the instructions.
>
> For details see the attached file.
>
> For security reasons attached file is password protected. The
> password is "28132".
>
> Cheers,
> The Python.org team
> http://www.python.org


it's not from anyone at python.org, and the zip file attached contains a
Windows virus. But if you run it anyway, I'm sure Guido will be happy to
fly to your house and clean up your PC.

it's-the-least-he-could-do-for-you-ly y'rs - tim


 
Reply With Quote
 
 
 
 
Michele Simionato
Guest
Posts: n/a
 
      03-03-2004
"Tim Peters" <(E-Mail Removed)> wrote in message news:<(E-Mail Removed)>...
> It shouldn't need to be said, but if you get a message that looks like this:
>
> > Dear user of Python.org gateway e-mail server,
> >
> > We warn you about some attacks on your e-mail account. Your
> > computer may contain viruses, in order to keep your computer and
> > e-mail account safe, please, follow the instructions.
> >
> > For details see the attached file.
> >
> > For security reasons attached file is password protected. The
> > password is "28132".
> >
> > Cheers,
> > The Python.org team
> > http://www.python.org

>
> it's not from anyone at python.org, and the zip file attached contains a
> Windows virus. But if you run it anyway, I'm sure Guido will be happy to
> fly to your house and clean up your PC.
>
> it's-the-least-he-could-do-for-you-ly y'rs - tim


I have got today a very similar message, but from my University provider.
Notice that I had just asked the University support team about filtering
my spam and the message seemed to refer to my request (the header was
smart enough).
Fortunately, I got suspicious when I was asked to run an executable
and I asked to the University before. It is a very subtle virus!

I don't think SpamAssassin could have filtered it. The spammers are
evolving and becoming smarter and smarter, I fear the day they will
be able to pass the Turing tests and we will be no more able to
distinguish automatically generated spam from real e-mail ....

A frightening perspective! :-/


Michele
 
Reply With Quote
 
 
 
 
Skip Montanaro
Guest
Posts: n/a
 
      03-03-2004

Michele> I have got today a very similar message, but from my University provider.

We got it here at Northwestern (same form, personalized for the Northwestern
community). The central group that worries mightily about this stuff has
sent out several alerts about it.

Michele> Fortunately, I got suspicious when I was asked to run an
Michele> executable and I asked to the University before. It is a very
Michele> subtle virus!

This is social engineering at its best (or worst, depending on your
perspective). I suspect it has been very effective for the perpetrators.

Skip

 
Reply With Quote
 
A.M. Kuchling
Guest
Posts: n/a
 
      03-03-2004
On 3 Mar 2004 05:26:02 -0800,
Michele Simionato <(E-Mail Removed)> wrote:
> I don't think SpamAssassin could have filtered it. The spammers are
> evolving and becoming smarter and smarter, I fear the day they will


It's trivial to block messages with attached executable or .zip files,
though.

--amk
 
Reply With Quote
 
Michael Hudson
Guest
Posts: n/a
 
      03-03-2004
http://www.velocityreviews.com/forums/(E-Mail Removed) (Michele Simionato) writes:

[virus]

> > it's not from anyone at python.org, and the zip file attached contains a
> > Windows virus. But if you run it anyway, I'm sure Guido will be happy to
> > fly to your house and clean up your PC.
> >
> > it's-the-least-he-could-do-for-you-ly y'rs - tim

>
> I have got today a very similar message, but from my University provider.


I got a dozen or so, all claiming to be from the 'ac.uk' email
organizers, a bug that the author needs to fix in the next version...

> I don't think SpamAssassin could have filtered it. The spammers are
> evolving and becoming smarter and smarter, I fear the day they will
> be able to pass the Turing tests and we will be no more able to
> distinguish automatically generated spam from real e-mail ....


Uh, not quite there yet in my email (unless you habitually get email
with subjects like "comedian gordon sideband numinous climatic").

Cheers,
mwh

--
I also feel it essential to note, [...], that Description Logics,
non-Monotonic Logics, Default Logics and Circumscription Logics
can all collectively go suck a cow. Thank you.
-- http://advogato.org/person/Johnath/diary.html?start=4
 
Reply With Quote
 
Dang Griffith
Guest
Posts: n/a
 
      03-04-2004
On Tue, 2 Mar 2004 21:38:02 -0500, "Tim Peters" <(E-Mail Removed)>
wrote:

>It shouldn't need to be said, but if you get a message that looks like this:
>
>> Dear user of Python.org gateway e-mail server,
>>
>> We warn you about some attacks on your e-mail account. Your
>> computer may contain viruses, in order to keep your computer and
>> e-mail account safe, please, follow the instructions.
>>
>> For details see the attached file.
>>
>> For security reasons attached file is password protected. The
>> password is "28132".
>>
>> Cheers,
>> The Python.org team
>> http://www.python.org

>
>it's not from anyone at python.org, and the zip file attached contains a
>Windows virus. But if you run it anyway, I'm sure Guido will be happy to
>fly to your house and clean up your PC.
>
>it's-the-least-he-could-do-for-you-ly y'rs - tim
>

I also received it at my lazytwinacres domain, from my own management
team, hahaha. Well, that's what the reply-to said. Since I manage
the email accounts, I somehow doubted its validity. I was surprised
that the attachment is only about 16k, instead of the usual 134k.
--dang
p.s.
For security reasons, can I use your password?
 
Reply With Quote
 
Gerrit
Guest
Posts: n/a
 
      03-04-2004
Dang Griffith wrote:
> Tim Peters wrote:
> >it's not from anyone at python.org, and the zip file attached contains a
> >Windows virus. But if you run it anyway, I'm sure Guido will be happy to
> >fly to your house and clean up your PC.
> >
> >it's-the-least-he-could-do-for-you-ly y'rs - tim
> >

> I also received it at my lazytwinacres domain, from my own management
> team, hahaha. Well, that's what the reply-to said. Since I manage
> the email accounts, I somehow doubted its validity. I was surprised
> that the attachment is only about 16k, instead of the usual 134k.


Having 0.102 points in Spambayes, this e-mail actually turned up in my
unsure box, because of the words follow, house, password, pc, please,
usual, viruses, zip, and (even stronger) attachement, security, virus
(even more strong) p.s., account and details. So, because this e-mail
has the same words multiple times it'll probably turn up in the unsure
box as well

So, let's include some hammy words:

original running unsubscribe fedora-list code import linux def getting
mailing call same already tool someone something gerrit, subject: ...
looks seems says nothing

That should do the trick

Gerrit.

--
Weather in Twenthe, Netherlands 04/03 14:55 UTC:
7.0°C haze mostly clear wind 4.5 m/s E (57 m above NAP)
--
Asperger's Syndrome - a personal approach:
http://people.nl.linux.org/~gerrit/english/

 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
TRANSFER 300$ To Your EFT Account By Just ONE CLICK From OTHER Account hollywood C Programming 0 10-23-2010 06:52 PM
Enabling\Disabling a Wireless Nic with a restricted account Bob Wireless Networking 3 12-14-2006 07:26 PM
How could I use NTL account to work with Freeserve account? Rajinder Nijjhar Computer Support 5 03-21-2006 07:39 PM
Mail Enabled Users - disabling user account - stop receipt of mail PJR MCSA 0 09-27-2005 07:53 PM
Converting AIM Account 2 AOL Account? Computer Support 7 08-28-2004 12:14 AM



Advertisments