[nsp-sec] Phedophile website advertised by spam, heads up Yahoo!

Guilherme Venere venere at cais.rnp.br
Fri Apr 18 14:03:56 EDT 2008


Hello,

I received the spam below on our incident handling e-mail. It is 
advertising a pedophile website and asking users to write back asking for 
information.

Yahoo may want to watch the accounts listed in the e-mail body, and maybe 
LEO should check it too?

Cheers,

Guilherme
CAIS/RNP AS1916

---------- Forwarded message ----------
Return-Path: <swigert1446 at yahoo.com>
Delivered-To: venere at cais.rnp.br
Received: (qmail 27478 invoked by uid 511); 18 Apr 2008 11:46:57 -0300
Delivered-To: cais at cais.rnp.br
Received: (qmail 27475 invoked by uid 0); 18 Apr 2008 11:46:57 -0300
Received: from b.mx.cais.rnp.br (200.144.121.37)
   by 0 with SMTP; 18 Apr 2008 11:46:57 -0300
Received: (qmail 28900 invoked from network); 18 Apr 2008 11:46:56 -0300
Received: from 12-208-23-239.client.mchsi.com (HELO 12.208.23.239)
     (12.208.23.239)
   by b.mx.cais.rnp.br with SMTP; 18 Apr 2008 11:46:56 -0300
Date: Fri, 18 Apr 2008 06:16:51 GMT
From: swigert1446 at yahoo.com
To: cais at cais.rnp.br
Subject:  (FORBIDDEN NEW PEDO CONTENT)
Message-ID: <1758509070.87230519945378 at yahoo.com>
X-Mailer: The Bat! (v1.53d)
X-Priority: 3 (Normal)
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.4 with clamdscan / ClamAV
     0.93/6819/Fri Apr 18 07:37:17 2008
X-Bogosity: Unsure, tests=bogofilter, spamicity=0.951341, version=1.1.6


You read this letter because your friend has
signed you up for our porn site free News&Pics mailing.

We have good news! New pics have been added - 
the YOUNGEST models and the most UNBELIEVABLE scenes.

100% anonymity guaranteed.

If you want to see this material, please reply to

interestedit at yahoo.com

with a mark "Send info" we shall send you adress this page.


Total unsubscribe?

Just Re. to: pics_boss at yahoo.com

Tnx!



More information about the nsp-security mailing list