Latest Worm

Fri Sep 19 09:34:35 PDT 2003

On Fri, Sep 19, 2003 at 07:18:51AM -0700, David Wolfskill wrote:
> >Date: Fri, 19 Sep 2003 03:55:14 -0400 (EDT)
> >From: Russ Witte <rjwitte at rjwitte.com>
> >To: baylisa at baylisa.org
> >Subject: Newest Security Update (fwd)
> 
> >Anyone else getting some sort of variation of this? I've received about 10 
> >or 12 over the last 48 hours along with an exe file (removed). Very good 
> >social engineering ...
> 
> Yeah, been getting 'em both at home and at baylisa.org; have yet to see
> them at freebsd.org.  I think a sendmail "milter" that would nuke *.exe
> messages would be appropriate.

Unless your users WANT to receive .exe files.  Then plugging in a virus
scanner like Sophos would be more appropriate.

* changing Subject line after parsing Wolfskill's message as SPAM.