Beware of emails telling you that your mail service will be down for a couple of days and to open a file with details of an autoforwarding service for your mail. Hoover Web Design has received several of these bogus email messages.
The subject of the email could be any one of the following:
E-mail account disabling warning.
E-mail account security warning.
Email account utilization warning.
Important notify about your e-mail account.
Notify about using the e-mail account.
Notify about your e-mail account utilization.
Warning about your e-mail account.
The forged email appears to be from Hoover's support email address. It could be from any one of the following email addresses: management@ administration@ staff@ noreply@ or support@. The purpose of the email is to get you to open a file that contains the BAGLE.J virus that will allow your PC to be controlled remotely. In our case, the spoofed email originated from Puerto Rico Telephone Company, IP 65.23.212.7 and is below:
Return-path:
<hoover at moon.vosn.net>
Envelope-to: webmaster at hooverwebdesign.com
Delivery-date: Thu, 11 Mar 2004 07:17:31 -0700
Received: from Hoover by moon.vosn.net with
local-bsmtp (Exim 4.24)
id 1B1R07-0000Ma-12
for webmaster at hooverwebdesign.com; Thu, 11
Mar 2004 07:17:31 -0700
Received: from [65.23.212.7] (helo=agustin-laptop)
by moon.vosn.net with smtp (Exim 4.24)
id 1B1R04-0000MN-US
for webmaster at hooverwebdesign.com; Thu, 11
Mar 2004 07:17:29 -0700
Date: Thu, 11 Mar 2004 09:17:43 -0500
To: webmaster at hooverwebdesign.com
Subject: Warning about your e-mail account.
From: support at hooverwebdesign.com
Message-ID: <yesvphfhdcrsmmnoipn at hooverwebdesign.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------ehpmwbptcfjxckujmkbe"
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11)
on moon.vosn.net
X-Spam-Status: No, hits=0.3 required=5.0 tests=NO_REAL_NAME
autolearn=no
version=2.63
X-Spam-Level:
Dear user, the management of Hooverwebdesign.com mailing system wants to let you know that,
Our
main mailing server will be temporary unavaible
for next two days,
to continue receiving mail in these days you
have to configure our free
auto-forwarding service.
Advanced details can be found in attached file.
In order to read the attach you have to use the following password: 88743.
Have
a good day,
The Hooverwebdesign.com team http://www.hooverwebdesign.com
Didn't see anything you
like?
Customize
any of our Web Templates
or view Premium
Website Templates with PSD Source Files
!
More website products: Flash
Photo Galleries
, Flash
MP3 Music Players
and Royalty
Free Stock Photos
.
Free Web Templates: Hoover
Free Templates
, A Free Web Template
, Free Clipart Web Templates
Join
our eMail list
to get sales announcements and discounts on your next web template purchase!