Stories
Slash Boxes
Comments
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

davorg (18)

davorg
  dave@dave.org.uk
http://dave.org.uk/
Yahoo! ID: daveorguk (Add User, Send Message)

Hacker, author, trainer

Technorati Profile [technorati.com]

Journal of davorg (18)

Thursday August 21, 2003
03:39 AM

Sobig

[ #14244 ]

In the last 24 hours I think I've recieved about 4-500 copies of the Sobig virus. I'm sure that's tiny compared to some of you, but it's by far the worst I've ever been hit by a virus. Fortunately they've all been caught by SpamAssassin.

On checking my spam inbox I see that Sobig is getting much cleverer. Amongst the people that the mail claims to come from I see names like kudra, pdcawley, gbarr and Andy Wardley. Of course I don't for a second believe that these people have a virus, just that their email addresses have been abused.

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login | Reply
Loading... please wait.
  • From midnight EDT to 12:23:35 EDT my backup MX has seen 775 copies of Sobig. Why am I virus filtering on my backup MX, you might ask? Well, mostly because I was using it for testing before I put the filtering on my primary MX, to avoid breaking real mail, it's just a side benefit that Sobig seems to prefer lower priority MXen just like spammers. :)