Since when is blender.org ...

Antares · Post by **Antares** » Sat Nov 06, 2004 12:54 pm

distributing virus/trojans?

harkyman · Post by **harkyman** » Sat Nov 06, 2004 2:49 pm

Viruses routinely spoof From: addresses.

Post by **stiv** » Sat Nov 06, 2004 4:26 pm

Just so you know:

If you get mail from some Nigerian guy offering to share a big pile of money, that's *probably* fake too.

Same goes for the constant reminders from Citibank to log in to 'verify your account info'.

jesterKing · Post by **jesterKing** » Sat Nov 06, 2004 5:26 pm

Also, if you get seducive mail from jessica at blender.org, don't get overly excited. It is fake. Even though the propositions might sound... exciting. Same goes for Anita and Rob.

/Nathan

theeth · Post by **theeth** » Sat Nov 06, 2004 10:02 pm

jesterKing wrote:Also, if you get seducive mail from jessica at blender.org, don't get overly excited. It is fake.

Darn, and I was here all laughing thinking you weren't fooling anyone with your impersonations.

Martin

yamyam · Post by **yamyam** » Sun Nov 07, 2004 12:32 am

theeth, I've got a mail from you.

and other blenderheads are...Bart, nico, etc.
Of course, these mails are fake. Subjects are only Re: or Your document or help! or ...

bertram · Post by **bertram** » Sun Nov 07, 2004 11:44 am

Yes, they're fake, but also the proof, that someones computer where all the blender staff is stored in an outlook adress book has been infected with a virus/worm.

joeri · Post by **joeri** » Sun Nov 07, 2004 11:51 pm

not sure about that bertram.
There never was a jessica or nico at blender.org. Nor at NaN, Not a Number or NeoGeo...

levon · Post by **levon** » Mon Nov 08, 2004 4:34 pm

i saw on the news today that the guy behind the Nigerian lottery, the nigerian shares, 'dead relatives inheritents' and those sorts of emails etc. he got arrested and faces up to 4 years goal time and had 1.5 million AUD$$ taken from him. it just shows some people are dumb

bertram · Post by **bertram** » Mon Nov 08, 2004 5:31 pm

levon wrote: it just shows some people are dumb

It also shows how those people are greedy for money.

@joeri: Yes, not sure, but Antares' e-mail-adress in context with one of the BF seems quite suspicious to me.

joeri · Post by **joeri** » Mon Nov 08, 2004 5:49 pm

I was trying to be friendly.
There was no nico at blender.org, so it can't be pulled out of the adresslist, right?
I'm no internet guru, hack not even a groupy, but doesn't the header of the mail state where it come from?
The

Code: Select all

Received: from ipmx09.bluehornet.com ([66.77.60.203]) by

part.

And shouldn't that read:

Code: Select all

from blender.org ([62.194.17.97])

orso? If not, I think it's spam, not send from a virus machine at the foundation.

bertram · Post by **bertram** » Mon Nov 08, 2004 7:57 pm

I don't know what's wrong with all the "somebody@blender.org" senders but:
The E-Mail that Antares received was definitely sent out by a worm. This is because of the attached file "price.scr" which indicates the worm W32.Beagle.AV@mm. And right this one is one of those who scans the outlook directory! Of course also for spoofing sender adresses.
It's not necessarily a bf-computer which is infected, but it is in fact a computer of someone who "knows" Antares and also the bf!

joeri · Post by **joeri** » Mon Nov 08, 2004 8:51 pm

I'm getting rejected mail back from servers that don't want my virusses. But my (up to date) virus scanner says I'm clean.

alien-xmp · Post by **alien-xmp** » Tue Nov 09, 2004 11:30 am

joeri wrote:I'm getting rejected mail back from servers that don't want my virusses. But my (up to date) virus scanner says I'm clean.

That's because the virus is spoofing *your* email address as the from on someone else's computer.

bf-blender-cvs@blender.org is a public mailing list - anyone can sign up, so it's probably in lots of peoples collected addresses, and it can easily be picked up by a spam spider searching the internet harvesting email addresses to spam. If you sign up, you get a message everytime someone makes a change to blender's source!