🚀 go-pugleaf

Not Me wrote:
> On Wed, 24 Sep 2003 22:49:29 GMT, "Dusty Rhodes" <crustydusty1@THIS
> PARThotmail.com> wrote:
>
>> Mark Fergerson wrote:
>>> Dusty Rhodes wrote:
>>>> Ben Bradley wrote:
>>>
>>> <snip>
>>>
>>>>>   People are talking about obscene volumes, thousands per day, but
>>>>> I'm "only" getting a few dozen a day.
>>>>
>>>>
>>>> I haven't seen so much as single one, at least not the MS scam
>>>> version. Only very rarely do I see others. I figured it was due to
>>>> effective counter measures at Texas.net, but I'm not seeing it on
>>>> any of my other accounts, either. Ah, the benefits of living right,
>>>> I suppose.
>>>
>>>    It's likely because you munged your reply address
>>> (included "THISPART") right off the bat. When the harvesters
>>> go through the newsgroups and adds yours to their list, it
>>> doesn't work so you get no reflections.
>>>
>>>    I just wish I'd munged mine earlier. Sigh.
>>
>> It does appear to be aimed at Usenet users. Not only are regular
>> users seeing higher volumes of the worm via e-mail than others, it's
>> now being posted to many groups, which strikes me as particularly
>> stupid. If one knows enough to mung one's return addy, it is very
>> likely one also knows better than to download and run some alleged
>> MS patch posted to Usenet by random idiots.
>
> I'm getting about 100 per day on my regular email address that has
> never been used on usenet. They may be harvesting from other locations
> as well, as I have use my regular email on bulletin boards. my usenet
> address is getting hammered as well, but I expect that all the time in
> any case.

I haven't looked at the worm, but I'd guess it also uses address books to
spread itself. You may have been in the address book of a clueless luser,
making you a target. Were targets selected mainly from online resources,
there are several accounts I'd expect to see HUGE volume on, as those
addresses have been widely disseminated all over the Net and especially the
Web.

Cheers,

Dusty