Re: [OT] virus activity with ukha_group

[Stuart Poulton <stuart.poulton@xxxxxxxxxxxxxx>]

Hi All,

Just to share, the current torrent of virii all with attached zip files
seem to fall under the following

http://www.sophos.com/virusinfo/analyses/w32baglezip.html

I think it's safe that the following is a true statement:

If you were sending a password protected file in an e-mail would you
really put the password in the same e-mail ?

Regards

Stuart


On Fri, 2004-03-05 at 13:05, Doogie Brodie wrote:
> Stephen Jones wrote:
>
> > Hi Adrian
> >
> > I've got a couple today to my group address as well. Saying that
I've
> > also received a couple to my normal address. So far they haven't
been
> > spam but unusual looking emails with zipped attachments
containing exe+
> > files.
>
> Just got one just now saying that the management of my domain was
> barring my email account for improper use, please open this zip file
(!)
>
> Headers said:-
>
> To: ukhad@xxxxxxx
> From: support@xxxxxxx
> X-SA-Exim-Mail-From: ukha@xxxxxxx
>