[Full-Disclosure] Netsky.P -> sneaky one!
joem at nist.gov
Tue Mar 23 13:50:56 GMT 2004
At 05:44 AM 3/23/2004, Andrew Aris wrote:
>just had a mail throught that NAV has detected as being Netsky.P, the text
>of the mail was:
>From: jaume at megacceso.com [mailto:jaume at megacceso.com]
>Sent: 23 March 2004 08:24
>Subject: Re: approved information
>+++ Attachment: No Virus found
>+++ MC-Afee AntiVirus - www.mcafee.com
>I thought the "MC-Afee" bit was a nice touch, might just convince a fair few
I saw one a even better...the From: address was support at symantec.com. They
were supposedly using their competitor's product -- Mc-Afee (sic) -- for
their virus scanning.
Full-Disclosure is hosted and sponsored by Secunia.