Spyware Sucks
“There is no magic fairy dust protecting Macs" – Dai Zovi, author of “The Mac Hacker’s Handbook"

The worst spam flood I have seen in a long time…

September 3rd 2006 in Uncategorized

This must be THE WORST spam flood I’ve seen in a long time, even worse than the Swiss Jobs spam, and who would have thought *that* would be possible.  Each spam dump comes from a different IP address. Here’s hoping not too many people get ripped off.


A quick check of the IP address of a few of these spam-dumps reveals that it is being sent via servers compromised using the MS06-040 vulnerability. When will people learn to patch their systems!!


http://cbl.abuseat.org/lookup.cgi?ip=218.220.228.21


x-sender: vacancy@jobsite.com.au
x-receiver: ****
X-SCL: 8 96.82%
Received: from -1211759344 ([218.220.228.21]) by *** with Microsoft SMTPSVC(6.0.3790.1830);
Thu, 7 Sep 2006 11:56:11 +0800
Received: from jobsite.com.au (-1211598304 [-1213579704])
by zaqdadce415.zaq.ne.jp (Qmailv1) with ESMTP id B27FE2F77C
for <****>; Wed, 06 Sep 2006 22:55:00 -0700
Date: Wed, 06 Sep 2006 22:55:00 -0700
From: “Towering H. Fiddle” <vacancy@jobsite.com.au>
X-Mailer: The Bat! (v2.00.4) Personal
X-Priority: 3
Message-ID: <4588786135.20060906225500@jobsite.com.au>
To: **** <****>
Subject: aussie jobs online
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=”———-AF270C798726A62″
X-AntiVirus: skaner antywirusowy poczty Wirtualnej Polski S. A.
Return-Path: vacancy@jobsite.com.au
X-OriginalArrivalTime: 07 Sep 2006 03:56:12.0949 (UTC) FILETIME=[8F816450:01C6D231]

This is a multi-part message in MIME format.

————AF270C798726A62
Content-Type: multipart/related;
type=”multipart/alternative”;
boundary=”———-78D61513D01FF86″

————78D61513D01FF86
Content-Type: multipart/alternative;
boundary=”———-B26DA691F192838″

————B26DA691F192838
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

PRESENTED BY:

Dear recipient,

http://cbl.abuseat.org/lookup.cgi?ip=82.42.173.87&.submit=Lookup


x-sender: vacancy@jobsite.com.au
x-receiver: *******
X-SCL: 8 96.83%
Received: from -1210985864 ([82.42.173.87]) by ****** with Microsoft SMTPSVC(6.0.3790.1830);
  Sun, 3 Sep 2006 03:56:22 +0800
Received: from jobsite.com.au (-1210483120 [-1210641768])
 by 82-42-173-87.cable.ubr06.live.blueyonder.co.uk (Qmailv1) with ESMTP id 79C1AB1F11
 for <*******>; Sat, 02 Sep 2006 14:55:10 -0700
Date: Sat, 02 Sep 2006 14:55:10 -0700
From: “Silencers U. Singapore” <vacancy@jobsite.com.au>
X-Mailer: The Bat! (v2.00.0) Personal
X-Priority: 3
Message-ID: <7030546854.20060902145510@jobsite.com.au>
To: ***** <******>
Subject: aussie jobs online
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary=”———-27BD9339F6DFA6C”
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.5; AVE: 6.17.0.2; VDF: 6.17.0.5; host: 82-42-173-87.cable.ubr06.live.blueyonder.co.uk)
Return-Path: vacancy@jobsite.com.au
X-OriginalArrivalTime: 02 Sep 2006 19:56:33.0155 (UTC) FILETIME=[E3C25530:01C6CEC9]


This is a multi-part message in MIME format.


————27BD9339F6DFA6C
Content-Type: multipart/related;
 type=”multipart/alternative”;
 boundary=”———-7B2FE267E71991A”


————7B2FE267E71991A
Content-Type: multipart/alternative;
 boundary=”———-A3260B9459A2849″


————A3260B9459A2849
Content-Type: text/plain
Content-Transfer-Encoding: 7bit


PRESENTED BY:


Dear recipient,


CarreerOne and SeekAU announces the beginning of a new global employment campaign offering you one more opportunity to earn extra money working in TT Technology sales team.


We are looking for honest, responsible, hard-working people that can dedicate 2-4 hours of their time per day and earn extra 300-500 AUD weekly. All offered positions are currently part-time and give you a chance to work mainly from home.


Please visit TT Tech’s corporate web site for more details regarding these vacancies.


3 comments to...
“The worst spam flood I have seen in a long time…”

Mike

Seeing heaps of these on our mailsystem as well.



Lex

Here also. The link in those spams even points to a server which doesn’t exist (anymore). I hope it exploded in the faces of those who created this spam.



Broncbuster21

Have been getting at least 7or 8 spams in my mail every time i open it why ?.


We’ll return you to our regularly scheduled program as soon as possible [:)]

Previous Entry

Stung through the chest by a stingray – a freak accidenthttp://www.news.com.au/story/0,23599,20349888-2,00.html 

Next Entry

Archives