reverse Spam?

[crokett]

I've gotten two spam messages in the last three days claiming to be from mail servers with delivery errors because the addressee does not exist. I did not send either one of the emails. The purported original message was attached at the bottom of the note. Didn't keep the messages, and didn't open the originals. Thought they might be a way to spread a new virus or something. Anybody else seen this?

[FoBoT]

maybe somebody spoofing your email address?

[TheCatMan]

I had a few a while back, I think the idea is that you'll read it to "remind" yourself why you sent it, then run whatever virus is attached to it. Afair, the virus in question needed something like Wine to run it so I never bothered.

[Allen614]

I've seen several on my Mom's Windoze box. I just wrote a rule to delete them on the server. Also she received some irate "take me off your mailing list" e-mails so I wrote a new rule to get another ISP.

[TCaptain70]

And they contain a trojan, at least the ones I've seen anyway.

My mom was fooled by these and it took a complete reinstall of windows to fix (since I didn't know enough to be sure to clean it out completely).

I've been getting these about 1-2 a month for the last 3 months.
Luckily, I get them in Evolution and they don't bother me...but I wish I had better skills to track down their origin so I could at least try and report it.

[GeekGuy]

I get literally thousands of those. Here's how it works.

A spammer has a disk containing a million or so emaill addresses.

*The spammer loads the disk, which takes control. The disk is programmed with at least a hundred ISP's/accounts because they can do only one spam run per account before the account is deleted.

*The disk loads a program that pings the ISP's mailserver to look for message limits. If the server has limits, it will spam in blocks until the account is terminated.

*It loads the spam for transport, randomly selecting one of the addresses for the "FROM:" field and linearly selecting addresses for the "Bcc:" field.

*Repeat above step until done, account cancelled or operation aborted.

I answered one of those "cash for Chriastmas" ads couple of years ago, got the disk, reverse engineered it, sent it to the cops, got the fu**er arrested :D :D :D :D :D :D :D

That's why you get the bounced mails - you are on a list and it was your addresses turn for the "FROM:" field.

[carrja99]

Yeah.. last year I kept getting returned email that had been sent to some russian site, but the username did not exist. The site appeared to be nothing more than a Russian ISP.

:confused: I was completely baffled :confused: