[SpamCop-List]
Re: [OT] dealing with dictionary and other repeated relay attempts
Marjolein Katsma
nobody at spamcop.net
Wed Jan 28 18:45:58 EST 2004
SikaSpam (SikaM-newminuitLoseThis at sneakemail.com) wrote in
news:1argvq0116y3c$.1okq0n6oaxvfa$.dlg at 40tude.net:
>> That's probably from the MyDoom worm.
>
> Did someone say somewhere that that worm does dictionary attacks? I was
> under the impression that it compiled the lists of addresses from all
> documents on a PC and then used these for both To and From.
It also prepends common names from a list to domains it finds; this page
has a long list (but I don't know whether it's complete):
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100983
&cid=9539
(sorry for the wrap)
--
Marjolein Katsma - Amsterdam, NL - http://hshelp.com/
Spammers steal resources: they're my enemy.
Cyveillance steals resources: they're my enemy.
The enemy of my enemy can be my enemy, too.
More information about the SpamCop-List
mailing list