Page 1 of 1

Fake messages & Virus Warning!

Posted: 20 Jun 2007, 21:18
by Z
I just felt that this is worth of reporting.
Dear user Kevin,

You have successfully updated the password of your Trashmail account.

If you did not authorize this change or if you need assistance with your account, please contact Trashmail customer service.

Thank you for using Trashmail!

+++ Attachment: No Virus (Clean)
+++ Trashmail Antivirus - http://www.trashmail.net
Attached file: C:\Program Files\Eudora\attach\updated-password.zip

Which naturally as you already know isn't clean and contains malware.

And another version:
Dear Trashmail Member,

Your e-mail account was used to send a huge amount of unsolicited spam messages during the recent week. If you could please take 5-10 minutes out of your online experience and confirm the attached document so you will not run into any future problems with the online service.

If you choose to ignore our request, you leave us no choice but to cancel your membership.

Thank you for using Trashmail!

+++ Attachment: No Virus (Clean)
+++ Trashmail Antivirus - http://www.trashmail.net
Attached file: account-report.zip

AFAIK, there has been some discussion about this(kind?) of matter before.

Re: Fake messages & Virus Warning!

Posted: 20 Jun 2007, 21:40
by Admin
Hi,

yes I got this messages also.
It seems that there is a virus somewhere which sends a template message and replace the name of company by the destination domain name automatically. I think its "Dear {DOMAINNAME} Member".
However you did not got this messages before because I was not accepting emails with this content. The messages were directly rejected by the SMTP server with an error message. Because of the migration from the old to the new SMTP server, I forgot to apply the same rules of the old server to the new. But I already updated the configuration files on the new SMTP server.
Thanks for your help.