AplusWebMaster
Topic Starter
FYI…
- http://www.theregister.com/2004/09/22/opt-out_exploit/
22 September 2004
"Users should be wary of pressing the 'click here to remove' link on spam messages because it serves to confirm to spammers that junk mail messages are being read. Such email addresses can be sold at a premium to other spammers. That's reason enough to simply delete spam messages, but a junk mail message doing the rounds today provides an even more compelling reason. Selecting the 'click here to remove' link on messages blocked by MessageLabs today triggers an attempt to load malicious code onto potentially vulnerable Windows PC…Alex Shipp of MessageLabs writes: "I have not finished analysing the EXE currently hosted (currently called windows-update.exe), but the spammers can change this at any time by uploading a new Trojan. Typically, your machine may be turned into an open proxy, have passwords extracted, and keyloggers installed. "So not only do you confirm your email address to the spammers, you also get to host their next spam run, and get your bank account cleaned out," he adds…"
- http://www.theregister.com/2004/09/22/opt-out_exploit/
22 September 2004
"Users should be wary of pressing the 'click here to remove' link on spam messages because it serves to confirm to spammers that junk mail messages are being read. Such email addresses can be sold at a premium to other spammers. That's reason enough to simply delete spam messages, but a junk mail message doing the rounds today provides an even more compelling reason. Selecting the 'click here to remove' link on messages blocked by MessageLabs today triggers an attempt to load malicious code onto potentially vulnerable Windows PC…Alex Shipp of MessageLabs writes: "I have not finished analysing the EXE currently hosted (currently called windows-update.exe), but the spammers can change this at any time by uploading a new Trojan. Typically, your machine may be turned into an open proxy, have passwords extracted, and keyloggers installed. "So not only do you confirm your email address to the spammers, you also get to host their next spam run, and get your bank account cleaned out," he adds…"