Per Jessen wrote:
Jim Flanagan wrote:
I'd like some advise on how to handle worm and phishing emails coming to one user on my postfix server. For about 3 weeks now, Clam-AV is advising that emails have been detected and not delivered due to them containing a worm. In this case it is Worm.Mydoom.M. About 8 to 10 a day are arriving, with ClamAV advising that the trace is to 2 different IP addresses. Ripe shows both to be registered thru an outfit in Paris (La Defense).
....
A few times I've forwarded the email to the bank, to their "abuse" userid, e.g., abuse@target-bank.com and have gotten some "thank you" replies from them. The ISP might not care, but the banks do, especially the security team who's going to reap the sweat and overtime if something goes wrong. And the bank has the legal know-how and clout with authorities to make something happen. -- In a time of universal deceit, telling the truth becomes an act of rebellion. --George Orwell