Author Topic: Identity Theft, sort of...  (Read 1122 times)

Offline kbeartx

  • TS Addict
  • Posts: 6772
    • View Profile
    • http://
Identity Theft, sort of...
« on: February 07, 2004, 11:33:30 PM »
Some SPAMMER is apparently spoofing my Yahoo address, coupled w/ another name, on their SPAMs.  

In the last two days I have received about twenty Delivery Failure bounces in my Yahoo inbox.

The 'sender of record' on these SPAMs varies from msg to msg, but some of the names used are Kelli Robertson, Deirdre Moss, Deborah Erwin, and Lolita Mcnally, each name followed by <myID@yahoo.com>.

These appear to be standard, legitimate bounce msgs, due to 'user over quota', 'mailbox full', 'user unknown', etc., and not the work of a worm - for one thing, there are no attchments, no 'payloads' and some of the bounce notifications include the full original SPAM msg (most if not all have been of the 'Make a Fortune on eBay' variety.

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 24925
  • 27" iMac (mid-17), Headless Mac mini, both 10.14.1
    • View Profile
    • http://www.mid-southweather.com
Identity Theft, sort of...
« Reply #1 on: February 08, 2004, 03:02:22 PM »
Sounds like the 'MyDOOM' virus currently running rampant on PC's. Mine have pretty much ceased with the filters created in POPMonitor. The only thing that seems to be correct, is your (or mine) address. It appears that the virus 'author' simply wants to overload the servers by making them create these 'bounce' messages.
I DREAM OF A SOCIETY
where a chicken can cross the road
without having its motives questioned.

Signals, holiday 2014

Offline kbeartx

  • TS Addict
  • Posts: 6772
    • View Profile
    • http://
Identity Theft, sort of...
« Reply #2 on: February 08, 2004, 04:48:55 PM »
QUOTE(airbusdriver @ Feb 8 2004, 4:02 PM)
Sounds like the 'MyDOOM' virus currently running rampant on PC's....

 I don't think so...I got several of the MyDoom emails, and they all had a payload of a ZIP or an EXE file.

The ones I've been receiving do not have any such payload (or any attachment at all for that matter).  

The msgs I've gotten appear to be actual automated Mailer Daemon msgs in response to a mass-mailing in which a number of the addressees are either over quota or have closed their accounts.

 - kbeartx

Offline RHPConsult

  • TS Addict
  • Posts: 7860
    • View Profile
    • http://
Identity Theft, sort of...
« Reply #3 on: February 09, 2004, 08:39:58 AM »
Kbear:

Look at the bright side. Maybe Kelli, Deirdre, Deborah, and Lolita just wanted to invite you to their SuperBowl Party!   Devilish2.gif

Offline kelly

  • TS Addict
  • *****
  • Posts: 17040
    • View Profile
    • http://
Identity Theft, sort of...
« Reply #4 on: February 09, 2004, 11:19:56 AM »
kelly
Veteran SuperUser