[Wolves] Your message to Linux-wlan-user awaits moderator approval

[Old Dan]

Matthew Warwick wrote:
> I cancelled this, looks like another Sobig email.
> How did it originate from our list though?
Sobig appears to work like klez in that it doesn't just set the 'To' 
email addy from the infected computer's list of retrieved email addys, 
it also sets the 'From' line randomly from the same list, and uses it's 
own internal smtp server to actually do the sending.

It's actually quite clever stuff, if a little inane.

> Works going to be a nightmare this weekend, last week we had 100's of
> people about Blaster, now this :'(
Quite.  Technical Support, eh?
::Is *so* not envious::

You have my sympathy.

-- 
Dan