Printable View
I was looking around AO and there is (I feel anyway) a surprising increase in threads about people recieving spoofed emails. I am assuming virii search for servers with open SMTP and they can spoof email through that. How do virii find open SMTP servers so efficiently? Why do people leave themselves open to this? Don't they notice mass amounts of traffic going through them.
-Cheers-
"I am assuming virii search for servers with open SMTP and they can spoof email through"
They send there own mail its not hard or complicated.
http://www.google.com/search?q=smtp+...utf-8&oe=utf-8
I mean how do you find one efficiently though.. Lots of IP's that don't support that in any form...
-Cheers-
They contain their own smtp engine (server).
They don't need to find a relay.. they are their own.
They just spoof the sender and other parts of the email.
PM: try this.... from any computer you like with internet access.....
Telnet <yourisp> 25
<server response> Blah
helo ao.com
<server response> 250 ok Blah
mail from: [email protected]
<server response> 250 ok blah
rcpt to: <your email addy at yourisp>
<server response> 250 ok Blah
data
<server response> 250 ok blah
this is a test message <enter> . <enter>
<server response> 250 ok blah
quit
You just emulated a virus.
In fact, if you open a virus in notepad, (assuming it's not encrypted), you can often find just those strings in the virus itself.
I was trying to do that in a program I was working on lol but I never figured out how. Jinx, how does it determine my ISP? Because I had wanted to have auto alerts via email but I couldn't find a good way to do it, but I figured since virii do it they would be a good place to find/thing to emulate.Quote:
They contain their own smtp engine (server).
-Cheers-
PM: It gets your ISP from your email address that it "harvests" from the infected machine.
If I have you in my address book and click on a virus it will know your ISP becuase your address is [email protected].... thus your isp is ao.com. From there do what I said in my previous post.... every mailserver _has_ to accept mail for it's own domain regardless of the source, (simplified but accept it... ;)), otherwise there would be no email.... period. thus, what I said to do will work if you contact any valid mailserver in the world and send an email to any valid user within the domain, (again, simplified but accept it).
Oh that is if you use outlook though... I am poor and use freemail!
-Cheers-
PM8228 since you insist on being difficult :] , some viruses go threw all cashed html pages and gather all email addresses they also look for the windows address book which many email clients use.
on your auto-alerter you could try perl using the smtp.pm. makes it real simple or even a bat using one of the many dos emailers or just shell out to it.
PM:
Please READ what I said!!!!!
You will notice that I didn't even mention _YOUR_ operating system let alone _YOUR_ email client. I said "the infected machine".... The infected machine isn't yours it's the other person's who clicked on the damn virus!!!!!!! The virus could give a rats a$$ what client _you_ use or your operating system all of this takes place on someone elses machine.......Quote:
It gets your ISP from your email address that it "harvests" from the infected machine.
There... Now you made me pissy and I haven't even gone to work yet!!!!!! :mad:
Just promise me that all these questuons arent going to end up forming the next bagle...Quote:
Originally posted here by PM8228
I was trying to do that in a program I was working on lol but I never figured out how. Jinx, how does it determine my ISP? Because I had wanted to have auto alerts via email but I couldn't find a good way to do it, but I figured since virii do it they would be a good place to find/thing to emulate.
-Cheers-
:mad:
With the questions so far I think we can rest assured that it will be another 10 years before we have to worry about it..... :rolleyes:Quote:
Just promise me that all these questuons arent going to end up forming the next bagle...
lol, true, true.
well, just sounds like hes playing with kiddy toolz