[ Date Index ]
[ Thread Index ]
[ <= Previous by date /
thread ]
[ Next by date /
thread => ]
Re: [LUG] [Admin] Windows Malware possibly from list subscriber
- To: list@xxxxxxxxxxxxx
- Subject: Re: [LUG] [Admin] Windows Malware possibly from list subscriber
- From: Paul Sutton via list <list@xxxxxxxxxxxxx>
- Date: Wed, 3 Feb 2021 20:51:45 +0000
- Cc: Paul Sutton <zleap@xxxxxxxxxxx>
- Content-language: en-GB
- Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1602234361; h=Sender:Content-Type: Content-Transfer-Encoding:Cc:Reply-To:From:List-Subscribe:List-Help:List-Post :List-Unsubscribe:List-Id:Subject:In-Reply-To:Mime-Version:Date:Message-ID: References:To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner:List-Archive; bh=v0mfP07L87xqK3RAuG+cD0JvF4WPNDgvq899w+xR+BM=; b=MwRhxq9MXLrZz68mos162qUgw zVHQaPZGFsJ29tZ0WAZDTRKZFU+JIfrL+2Gcr6pzIaan7vc1wFMMq0fTKIy/sW6Jn8w0EabZCMIa0 t71ZU3fczWWFOLVf8VnNoUlW9IccC9q1SclQ8OFHDEpuupwVnWU4nvADq9h8S44rpr8lA=;
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1612385506; bh=w3bUjBbiuRtQ7OfbautvGC+rHUbObakt0rzKAsdE84M=; h=Subject:To:References:From:Date:In-Reply-To; b=UuzM22gMVE7FMN6Ang/fCeMWU7/1PCYDs+7713bleVA8PedIg+iIRixf2r9dJKdjd sA76NglPxc1kvcR3UbGpFSzw9jmk9q4SslmVuJTfIk0nSyGWCvJ5usCU0O3KD4R2u4 6JUdl8UY4WtOLJIrVwwidpD7YDo4qO+v1V2H1qbCd8Xl819dWkMB2bdmq4vUDhra+g rBqFWxrdzVBukQrvctQSqPb07tbD6UzemsGQ6OXfj9nILA96YG4Mzvc5h6GddSqst5 Pb0PK/O7/+NqQu231V0+Subrh4EZROXjZuWviYyeuAn0otq58CkciSdpl5t2HMC4/w Q0tWYr3oN9+xg==
I got this message too, sent to my old e-mail address i was using at the
time, suspicions was directing me to a attached file, equally suspicions
so deleted.
Was the tech issue something to do with devedeng (dvd software)? the
e-mail I received was, I only blogged about that the other day.
Paul
On 03/02/2021 20:14, Simon Waters wrote:
I wouldn't normally flag but received malware via an email which incorporates
text and the mailing list headers (List-ID header) from an old message. So it
was filtered into my mailing list folder.
Clearly someone on the list is or was(!) infected with Windows malware on a
machine with a copy of a mailing list message from Alex Mclennan posted in May
2010. Guessing that cuts it down as to whose PC, but they may not be a
subscriber any more.
The malware was Excel Macro based. Generally the mailing list won't pass on
file attachments, so don't open Excel files that appear to be sent to the
mailing list, they weren't.
Also if someone is replying to technical Linux emails you sent them in 2010
that is probably suspicious too, unless it really wasn't that urgent a problem
to fix.
Simon
--
Paul Sutton, Cert ContSci (Open)
https://personaljournal.ca/paulsutton/
Fosden 2021 - 6th & 7th March - https://fosdem.org/2021/
LibrePlanet 2021 - March 2021 - https://libreplanet.org/wiki/Main_Page
--
The Mailing List for the Devon & Cornwall LUG
https://mailman.dcglug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq
