{"id":4406,"date":"2003-09-09T05:41:36","date_gmt":"2003-09-09T12:41:36","guid":{"rendered":"http:\/\/hill-kleerup.org\/blog\/wp\/?p=4406"},"modified":"2003-09-09T05:41:36","modified_gmt":"2003-09-09T12:41:36","slug":"who_knows_what","status":"publish","type":"post","link":"https:\/\/hill-kleerup.org\/blog\/2003\/09\/09\/who_knows_what.html","title":{"rendered":"Who knows what evil lurks in the hearts of men …?"},"content":{"rendered":"

SoBig knows. Bwah-ha-ha!<\/p>\n

No, actually, the SoBig virus does not, officially, transmit any info from an infected machine to other machines in its attempt to reproduce itself. No info, that is, except addresses in the person’s mail system.<\/p>\n

Craig, in Atlanta, has a broadband connection, from alantabroadband.com. He also has Sobig. And he’s been sending me between 60 and 100 infected messages *per hour* for the past couple of days. (He seems to turn his machine off at night. Thank goodness.)
\n[…] Given the number of messages I’ve received from him over the past two days, I’ve got a pretty complete list of the email addresses on his machine.
\nNot knowing the rag, I don’t know whether I’m supposed to be impressed that he is in contact with Intelligencer@NewYorkMag.com. He seems to be into self- promotion–premierlistny@aol.com and ratings@about-inc.com. And maybe trying to set up his own business (ezcreationsltd@yahoo.com)? He *does* seem to be trying to better himself, maybe get an education (ZZZZZZZ@learnlink.emory.edu and LearnLinkinfo@learnlink.emory.edu). He might be aware that something is wrong with his machine: he seems to be rather eclectic in terms of where he goes for help (hot-line@microsoft.hr, InfoService@microsoft.at, mssupport@gbrands.com, mswsgulf@microsoft.com).
\nAll of this may be due to an impending marriage: is he searching for an engagement ring (info@shimmerandstone.com)? And, if so, does his fiancee know about help@nudesonline.com, sal@freexxx.ws, salform@freexxx.ws, sassyemail@yahoo.com, and support@bigbonerbonus.com?
\nThen again, maybe he’s a terrorist: mts@lebanon-online.com.lb.<\/p>\n

Interesting, what sort of intel something like this can reveal about you. Makes me wonder what addresses might be lurking in folders on my <\/i>machine …<\/p>\n

(via RISKS<\/a>)<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"

SoBig knows. Bwah-ha-ha! No, actually, the SoBig virus does not, officially, transmit any info from an infected machine to other machines in its attempt to reproduce itself. No info, that…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_analysis_target_kw":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[39],"tags":[],"class_list":["post-4406","post","type-post","status-publish","format-standard","hentry","category-spam"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":4365,"url":"https:\/\/hill-kleerup.org\/blog\/2003\/09\/17\/routing_around.html","url_meta":{"origin":4406,"position":0},"title":"Routing around the damage","author":"***Dave","date":"Wed 17-Sep-03 11:55am","format":false,"excerpt":"A few days ago, I came across a post from Seki about Veri$ign's latest Internet power-grab. V$, you see, not only has monopoly control of the .com and .net top...","rel":"","context":"In "Blogging & Internet"","block_context":{"text":"Blogging & Internet","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":10661,"url":"https:\/\/hill-kleerup.org\/blog\/2006\/11\/28\/awash_in_spam.html","url_meta":{"origin":4406,"position":1},"title":"Awash in spam","author":"***Dave","date":"Tue 28-Nov-06 7:47am","format":false,"excerpt":"Back in the office, and, yikes, boatloads of spam in the company inbox. Which is a bit unusual, as the corporate spam fighters are pretty diligent about fighting the stuff....","rel":"","context":"In "Spam"","block_context":{"text":"Spam","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/computer-security\/spam"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":4336,"url":"https:\/\/hill-kleerup.org\/blog\/2003\/09\/23\/half_a_loaf.html","url_meta":{"origin":4406,"position":2},"title":"Half a loaf","author":"***Dave","date":"Tue 23-Sep-03 7:13am","format":false,"excerpt":"Something odd's going on with web access at our house. I use my notebook computer at the table over a WiFi connection to Margie's PC. Margie's PC dials up and...","rel":"","context":"In "Blogging & Internet"","block_context":{"text":"Blogging & Internet","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":6564,"url":"https:\/\/hill-kleerup.org\/blog\/2004\/08\/18\/in_the_time_of.html","url_meta":{"origin":4406,"position":3},"title":"In the Time of the Plague …","author":"***Dave","date":"Wed 18-Aug-04 7:14am","format":false,"excerpt":"An unprotect PC, connected to the Internet (capitalized or not) will be infected by something within twenty minutes. According to the researchers, an unpatched Windows PC connected to the Internet...","rel":"","context":"In "Spam"","block_context":{"text":"Spam","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/computer-security\/spam"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3129,"url":"https:\/\/hill-kleerup.org\/blog\/2002\/08\/06\/its_so_sad_sad.html","url_meta":{"origin":4406,"position":4},"title":"It’s so sad … sad … sad …","author":"***Dave","date":"Tue 6-Aug-02 12:03pm","format":false,"excerpt":"The heart-aches and heart-breaks of a spammer: \"My operating costs have gone up 1,000 percent this year, just so I can figure out how to get around all these filters,\"...","rel":"","context":"In "Spam"","block_context":{"text":"Spam","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/computer-security\/spam"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":4527,"url":"https:\/\/hill-kleerup.org\/blog\/2003\/08\/12\/blast_2.html","url_meta":{"origin":4406,"position":5},"title":"Blast!","author":"***Dave","date":"Tue 12-Aug-03 2:48pm","format":false,"excerpt":"Another day, another massive viral infection hits the Net, this time in the form of the Blaster (or Lovsan) worm. As always, keep a good firewall, have a good AV...","rel":"","context":"In "Hi-Tech"","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/4406","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/comments?post=4406"}],"version-history":[{"count":0,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/4406\/revisions"}],"wp:attachment":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media?parent=4406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/categories?post=4406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/tags?post=4406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}