RE: E-mail account disabling warning.

Discussion in 'Python' started by Tim Peters, Mar 3, 2004.

  1. Tim Peters

    Tim Peters Guest

    It shouldn't need to be said, but if you get a message that looks like this:

    > Dear user of Python.org gateway e-mail server,
    >
    > We warn you about some attacks on your e-mail account. Your
    > computer may contain viruses, in order to keep your computer and
    > e-mail account safe, please, follow the instructions.
    >
    > For details see the attached file.
    >
    > For security reasons attached file is password protected. The
    > password is "28132".
    >
    > Cheers,
    > The Python.org team
    > http://www.python.org


    it's not from anyone at python.org, and the zip file attached contains a
    Windows virus. But if you run it anyway, I'm sure Guido will be happy to
    fly to your house and clean up your PC.

    it's-the-least-he-could-do-for-you-ly y'rs - tim
     
    Tim Peters, Mar 3, 2004
    #1
    1. Advertising

  2. "Tim Peters" <> wrote in message news:<>...
    > It shouldn't need to be said, but if you get a message that looks like this:
    >
    > > Dear user of Python.org gateway e-mail server,
    > >
    > > We warn you about some attacks on your e-mail account. Your
    > > computer may contain viruses, in order to keep your computer and
    > > e-mail account safe, please, follow the instructions.
    > >
    > > For details see the attached file.
    > >
    > > For security reasons attached file is password protected. The
    > > password is "28132".
    > >
    > > Cheers,
    > > The Python.org team
    > > http://www.python.org

    >
    > it's not from anyone at python.org, and the zip file attached contains a
    > Windows virus. But if you run it anyway, I'm sure Guido will be happy to
    > fly to your house and clean up your PC.
    >
    > it's-the-least-he-could-do-for-you-ly y'rs - tim


    I have got today a very similar message, but from my University provider.
    Notice that I had just asked the University support team about filtering
    my spam and the message seemed to refer to my request (the header was
    smart enough).
    Fortunately, I got suspicious when I was asked to run an executable
    and I asked to the University before. It is a very subtle virus!

    I don't think SpamAssassin could have filtered it. The spammers are
    evolving and becoming smarter and smarter, I fear the day they will
    be able to pass the Turing tests and we will be no more able to
    distinguish automatically generated spam from real e-mail ....

    A frightening perspective! :-/


    Michele
     
    Michele Simionato, Mar 3, 2004
    #2
    1. Advertising

  3. Michele> I have got today a very similar message, but from my University provider.

    We got it here at Northwestern (same form, personalized for the Northwestern
    community). The central group that worries mightily about this stuff has
    sent out several alerts about it.

    Michele> Fortunately, I got suspicious when I was asked to run an
    Michele> executable and I asked to the University before. It is a very
    Michele> subtle virus!

    This is social engineering at its best (or worst, depending on your
    perspective). I suspect it has been very effective for the perpetrators.

    Skip
     
    Skip Montanaro, Mar 3, 2004
    #3
  4. On 3 Mar 2004 05:26:02 -0800,
    Michele Simionato <> wrote:
    > I don't think SpamAssassin could have filtered it. The spammers are
    > evolving and becoming smarter and smarter, I fear the day they will


    It's trivial to block messages with attached executable or .zip files,
    though.

    --amk
     
    A.M. Kuchling, Mar 3, 2004
    #4
  5. (Michele Simionato) writes:

    [virus]

    > > it's not from anyone at python.org, and the zip file attached contains a
    > > Windows virus. But if you run it anyway, I'm sure Guido will be happy to
    > > fly to your house and clean up your PC.
    > >
    > > it's-the-least-he-could-do-for-you-ly y'rs - tim

    >
    > I have got today a very similar message, but from my University provider.


    I got a dozen or so, all claiming to be from the 'ac.uk' email
    organizers, a bug that the author needs to fix in the next version...

    > I don't think SpamAssassin could have filtered it. The spammers are
    > evolving and becoming smarter and smarter, I fear the day they will
    > be able to pass the Turing tests and we will be no more able to
    > distinguish automatically generated spam from real e-mail ....


    Uh, not quite there yet in my email (unless you habitually get email
    with subjects like "comedian gordon sideband numinous climatic").

    Cheers,
    mwh

    --
    I also feel it essential to note, [...], that Description Logics,
    non-Monotonic Logics, Default Logics and Circumscription Logics
    can all collectively go suck a cow. Thank you.
    -- http://advogato.org/person/Johnath/diary.html?start=4
     
    Michael Hudson, Mar 3, 2004
    #5
  6. On Tue, 2 Mar 2004 21:38:02 -0500, "Tim Peters" <>
    wrote:

    >It shouldn't need to be said, but if you get a message that looks like this:
    >
    >> Dear user of Python.org gateway e-mail server,
    >>
    >> We warn you about some attacks on your e-mail account. Your
    >> computer may contain viruses, in order to keep your computer and
    >> e-mail account safe, please, follow the instructions.
    >>
    >> For details see the attached file.
    >>
    >> For security reasons attached file is password protected. The
    >> password is "28132".
    >>
    >> Cheers,
    >> The Python.org team
    >> http://www.python.org

    >
    >it's not from anyone at python.org, and the zip file attached contains a
    >Windows virus. But if you run it anyway, I'm sure Guido will be happy to
    >fly to your house and clean up your PC.
    >
    >it's-the-least-he-could-do-for-you-ly y'rs - tim
    >

    I also received it at my lazytwinacres domain, from my own management
    team, hahaha. Well, that's what the reply-to said. Since I manage
    the email accounts, I somehow doubted its validity. I was surprised
    that the attachment is only about 16k, instead of the usual 134k.
    --dang
    p.s.
    For security reasons, can I use your password? ;-)
     
    Dang Griffith, Mar 4, 2004
    #6
  7. Tim Peters

    Gerrit Guest

    Dang Griffith wrote:
    > Tim Peters wrote:
    > >it's not from anyone at python.org, and the zip file attached contains a
    > >Windows virus. But if you run it anyway, I'm sure Guido will be happy to
    > >fly to your house and clean up your PC.
    > >
    > >it's-the-least-he-could-do-for-you-ly y'rs - tim
    > >

    > I also received it at my lazytwinacres domain, from my own management
    > team, hahaha. Well, that's what the reply-to said. Since I manage
    > the email accounts, I somehow doubted its validity. I was surprised
    > that the attachment is only about 16k, instead of the usual 134k.


    Having 0.102 points in Spambayes, this e-mail actually turned up in my
    unsure box, because of the words follow, house, password, pc, please,
    usual, viruses, zip, and (even stronger) attachement, security, virus
    (even more strong) p.s., account and details. So, because this e-mail
    has the same words multiple times it'll probably turn up in the unsure
    box as well ;-)

    So, let's include some hammy words:

    original running unsubscribe fedora-list code import linux def getting
    mailing call same already tool someone something gerrit, subject: ...
    looks seems says nothing

    That should do the trick ;-)

    Gerrit.

    --
    Weather in Twenthe, Netherlands 04/03 14:55 UTC:
    7.0°C haze mostly clear wind 4.5 m/s E (57 m above NAP)
    --
    Asperger's Syndrome - a personal approach:
    http://people.nl.linux.org/~gerrit/english/
     
    Gerrit, Mar 4, 2004
    #7
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. The Post Office
    Replies:
    0
    Views:
    600
    The Post Office
    Oct 25, 2004
  2. The Post Office
    Replies:
    0
    Views:
    649
    The Post Office
    Dec 3, 2004
  3. Replies:
    0
    Views:
    671
  4. nilapenn
    Replies:
    3
    Views:
    639
    Joe Kaplan \(MVP - ADSI\)
    Feb 14, 2005
  5. Replies:
    4
    Views:
    651
    Paul Clement
    Sep 15, 2005
Loading...

Share This Page