Virus emails from nanog mail list

Tue Aug 19 16:49:22 UTC 2003

> Date: Tue, 19 Aug 2003 12:42:49 -0400
> From: David Diaz <techlist at smoton.net>
> Sender: owner-nanog at merit.edu
> 
> 
> Spam may be off topic but in this case relevant.  Has anyone else 
> noticed bounced emails that appear to have origionated from their 
> nanog email boxes and contain viruses?
> 
> Obviously some bot has gone threw the nanog list and is now forging 
> headers such that they appear to come from those addresses, and they 
> are attaching viruses.
> 
> The IP address (which may or may not be accurate) appears to be 
> [195.157.87.253].
> 
> Has anyone else noticed this recently?

On many lists. The latest and most annoying version of Sobig worm has
hit the nets and I have gotten at least 50 copies already today.
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman at es.net			Phone: +1 510 486-8634