Worm bait?

[Robert L Krawitz]

   From: Stephen Anthony <steve at stephencanthony.com>
   Date: 19 Aug 2003 19:55:39 -0400

   I received a email from a postfix mailer that tells me the message I
   sent bounced. All well and good, except I didn't send the message to
   begin with. Also, it says it was sent from my old attbi.com address
   (correct user name, tho) which I haven't used in a few months.

   I'm running my Evolution as my mail client, if that matters. 

   I'm concerned that someone may have gotten access to the attbi account
   and is sending mail as me. 

   Things I should do to investigate?

I've received a ton of these today.  I think that the latest worm de
l'heur is particularly aggressive at scanning systems for email
addresses and randomly using one as the sender.

-- 
Robert Krawitz                                     <rlk at alum.mit.edu>      

Tall Clubs International  --  http://www.tall.org/ or 1-888-IM-TALL-2
Member of the League for Programming Freedom -- mail lpf at uunet.uu.net
Project lead for Gimp Print   --    http://gimp-print.sourceforge.net

"Linux doesn't dictate how I work, I dictate how Linux works."
--Eric Crampton