All the Perl that's Practical to Extract and Report

Sobig

davorg on 2003-08-21T08:39:26

In the last 24 hours I think I've recieved about 4-500 copies of the Sobig virus. I'm sure that's tiny compared to some of you, but it's by far the worst I've ever been hit by a virus. Fortunately they've all been caught by SpamAssassin.

<>On checking my spam inbox I see that Sobig is getting much cleverer. Amongst the people that the mail claims to come from I see names like kudra, pdcawley, gbarr and Andy Wardley. Of course I don't for a second believe that these people have a virus, just that their email addresses have been abused.

Evil Sobig

krellis on 2003-08-21T16:25:21

From midnight EDT to 12:23:35 EDT my backup MX has seen 775 copies of Sobig. Why am I virus filtering on my backup MX, you might ask? Well, mostly because I was using it for testing before I put the filtering on my primary MX, to avoid breaking real mail, it's just a side benefit that Sobig seems to prefer lower priority MXen just like spammers. :)