Author Topic: Identity Theft, sort of...  (Read 1640 times)

Offline kbeartx

  • TS Addict
  • Posts: 6772
    • View Profile
    • http://
Identity Theft, sort of...
« on: February 07, 2004, 11:33:30 PM »
Some SPAMMER is apparently spoofing my Yahoo address, coupled w/ another name, on their SPAMs.  

In the last two days I have received about twenty Delivery Failure bounces in my Yahoo inbox.

The 'sender of record' on these SPAMs varies from msg to msg, but some of the names used are Kelli Robertson, Deirdre Moss, Deborah Erwin, and Lolita Mcnally, each name followed by <myID@yahoo.com>.

These appear to be standard, legitimate bounce msgs, due to 'user over quota', 'mailbox full', 'user unknown', etc., and not the work of a worm - for one thing, there are no attchments, no 'payloads' and some of the bounce notifications include the full original SPAM msg (most if not all have been of the 'Make a Fortune on eBay' variety.

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 25952
  • 27" iMac (mid-17), Mac mini, both 10.14.6
    • View Profile
    • Mid-South Weather
Identity Theft, sort of...
« Reply #1 on: February 08, 2004, 03:02:22 PM »
Sounds like the 'MyDOOM' virus currently running rampant on PC's. Mine have pretty much ceased with the filters created in POPMonitor. The only thing that seems to be correct, is your (or mine) address. It appears that the virus 'author' simply wants to overload the servers by making them create these 'bounce' messages.
I don’t like the fact that my chances of survival seem to be linked to the common sense of others. :Thinking:
CAUTION! Childhood vaccinations cause adults! :yes:

Offline kbeartx

  • TS Addict
  • Posts: 6772
    • View Profile
    • http://
Identity Theft, sort of...
« Reply #2 on: February 08, 2004, 04:48:55 PM »
QUOTE(airbusdriver @ Feb 8 2004, 4:02 PM)
Sounds like the 'MyDOOM' virus currently running rampant on PC's....

 I don't think so...I got several of the MyDoom emails, and they all had a payload of a ZIP or an EXE file.

The ones I've been receiving do not have any such payload (or any attachment at all for that matter).  

The msgs I've gotten appear to be actual automated Mailer Daemon msgs in response to a mass-mailing in which a number of the addressees are either over quota or have closed their accounts.

 - kbeartx

Offline RHPConsult

  • TS Addict
  • Posts: 7860
    • View Profile
    • http://
Identity Theft, sort of...
« Reply #3 on: February 09, 2004, 08:39:58 AM »
Kbear:

Look at the bright side. Maybe Kelli, Deirdre, Deborah, and Lolita just wanted to invite you to their SuperBowl Party!   Devilish2.gif

Offline kelly

  • TS Addict
  • *****
  • Posts: 17040
    • View Profile
    • http://
Identity Theft, sort of...
« Reply #4 on: February 09, 2004, 11:19:56 AM »
kelly
Veteran SuperUser