On Thu, 2004-03-04 at 14:49, pinto wrote:

Dear SuSErs,

Is this a genuine SuSE message, because there was NO attachment, and when I replied. requesting a re-send of the attachment, the SuSE mail server tells me that there is not an address ??

---------- Forwarded Message ----------

Subject: [SLE] E-mail account security warning. Date: Thursday 04 March 2004 19:34 From: management@suse.com To: suse-linux-e@suse.com

Dear user, the management of Suse.com mailing system wants to let you know that,

Some of our clients complained about the spam (negative e-mail content) outgoing from your e-mail account. Probably, you have been infected by a proxy-relay trojan server. In order to keep your computer safe, follow the instructions.

For further details see the attach.

For security reasons attached file is password protected. The password is "34451".

Sincerely, The Suse.com team http://www.suse.com

-------------------------------------------------------

________________________________________________________________________ Thats the W32.Netsky.D@mm Virus... See this... http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.d@mm.html it fakes the domain, the to: and from: --Charles

On Thursday 04 March 2004 20:49, pinto wrote:

Dear SuSErs,

Is this a genuine SuSE message, because there was NO attachment, and when I replied. requesting a re-send of the attachment, the SuSE mail server tells me that there is not an address ??

Nope, not genuine at all. It's virtually identical to a virus/spam we got at work today. The VP got it, opened it, discovered it was a virus, and sent out a warning to every one - especially the sales/ marketing guys since they run Windows. Good thing the rest of us use Linux ;-) He says it's a new and creative way to distribute a virus. The scanners don't catch it because the attachment (when it gets through) really is password protected. So... welcome to the next level of virus distribution. Sneaky eh? Almost made you look. Be glad the mailing list strips all attachments. C.

---------- Forwarded Message ----------

Subject: [SLE] E-mail account security warning. Date: Thursday 04 March 2004 19:34 From: management@suse.com To: suse-linux-e@suse.com

Dear user, the management of Suse.com mailing system wants to let you know that,

Some of our clients complained about the spam (negative e-mail content) outgoing from your e-mail account. Probably, you have been infected by a proxy-relay trojan server. In order to keep your computer safe, follow the instructions.

For further details see the attach.

For security reasons attached file is password protected. The password is "34451".

Sincerely, The Suse.com team http://www.suse.com

-------------------------------------------------------