« If this is true... | Main| It's comes along but once every four years »

What's the deal with all the HYWI.PK or other stock ending with PK spam?

Category
Is there a new virus out there? The spam folders been going crazy, and Yahoo didn't even manage to mark most of them as spam this morning on my personal account.

Posted by Carl Tyler On 06/08/2006 | | del.icio.us  Technorati  Digg This 

Comments

Gravatar Image1 - We saw some funny spam activity on Tuesday: http://apps.fmc.com/Blog.nsf/dx/failed-spam.htm

MessageLabs are now catching this though, su business as usual now.

Posted by Simon Barratt At 03:28:41 PM On 06/08/2006 | - Website - |


Gravatar Image2 - We've been seeing loads of these too.

Interestingly they were preceded a day or two earlier by a large number of empty spams (no body or header fields of any sort but just protocol HELO, MAIL FROM:<random>, RCPT TO:<victim> for multiple values of <victim>) and these empty spams came from the same IP as the later stock spams - 222.212.68.3

This is in China and is now said by the CBL to be an open proxy.

Just block China. Works well here.



Posted by Chris Linfoot At 04:52:48 AM On 06/09/2006 | - Website - |


Post A Comment

:-D:-o:-p:-x:-(:-):-\:angry::cool::cry::emb::grin::huh::laugh::rolleyes:;-)