[Cialug] self-aware viruses/trojans

David Champion dchamp1337 at gmail.com
Mon Apr 1 14:47:47 CDT 2013


You of all people should know that realtors are human spambots.

I'm seeing a lot of obvious spambot emails coming to me from some of my
Facebook friends who never email me, and at least two of them I know have
had seriously virus'dup PC's in the past. The messages usually have a
subject like "Hey Dave", the body contains a link that is obviously a
phishing / trojan site. I assume there is spambot that's collecting email
addresses from their Facebook accounts.

-dc


On Mon, Apr 1, 2013 at 2:34 PM, Barry Von Ahsen <barry at vonahsen.com> wrote:

> has anyone seen this behavior?
>
> I get a real estate spam from person A to a ginormous To: list
> person B responds to spam with a similarly spammy message to the same list
> person C sends a new spam with very similar message to about half of the
> original list
>
> I respond to A, B and C informing them that they should change their email
> passwords and seek virus removal services
>
> B responds to me with "Nop i sent it ...its new properties" [sic]
> A responds to me with "not a virus i checked its amazing" [sic]
>
>
> it seems that the spams/trojans are talking to each other.  given that the
> Zeus trojan sat in your browser and monitored your banking transactions and
> modified it's activities, I don't find it unreasonable that an email trojan
> would do the same.
>
> the pseudo code is easy enough: if a message comes in in-response-to my
> message, and the body is like '%you have a virus%', then respond 'no, it's
> okay, click the link' goto subjugate_humans
>
>
> -barry
>
>
>
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
>


More information about the Cialug mailing list