[iwar] [fc:Looks.like.India's.Ministry.of.External.Affairs.network.has.again.been.hit.by.viruses.]

From: Fred Cohen (fc@all.net)
Date: 2001-10-02 05:23:01


Return-Path: <sentto-279987-2585-1002025417-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Tue, 02 Oct 2001 05:24:40 -0700 (PDT)
Received: (qmail 11277 invoked by uid 510); 2 Oct 2001 12:23:46 -0000
Received: from n13.groups.yahoo.com (216.115.96.63) by 204.181.12.215 with SMTP; 2 Oct 2001 12:23:46 -0000
X-eGroups-Return: sentto-279987-2585-1002025417-fc=all.net@returns.onelist.com
Received: from [10.1.4.56] by n13.groups.yahoo.com with NNFMP; 02 Oct 2001 12:23:37 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_4_1); 2 Oct 2001 12:23:37 -0000
Received: (qmail 11271 invoked from network); 2 Oct 2001 12:23:36 -0000
Received: from unknown (10.1.10.27) by l10.egroups.com with QMQP; 2 Oct 2001 12:23:36 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta2 with SMTP; 2 Oct 2001 12:23:21 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id FAA02435 for iwar@onelist.com; Tue, 2 Oct 2001 05:23:01 -0700
Message-Id: <200110021223.FAA02435@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Tue, 2 Oct 2001 05:23:01 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [fc:Looks.like.India's.Ministry.of.External.Affairs.network.has.again.been.hit.by.viruses.]
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Looks like India's Ministry of External Affairs network has again been hit by viruses.

I just got an email from the Indian embassy in Switzerland 
(<a href="mailto:india@spectraweb.ch?Subject=Re:%20[South%20Asia%20Security%20&amp;%20Info%20War]%20India's%20Ministry%20of%20External%20Affairs%20again%20hit%20by%20virus%2526In-Reply-To=%2526lt;9pa43a%2Bcpd2@eGroups.com">india@spectraweb.ch</a>) which c
ontained a description of Switzerland's 
security policies and possible cooperation with Switzerland on 
military training. There was an attachment called Switzerland.exe

Naturally I did not click on the executable attachment.

Within seconds, I received another email from the Indian High 
Commission in Addis Abbaba (<a href="mailto:hicomind@mweb.com.na?Subject=Re:%20[South%20Asia%20Security%20&amp;%20Info%20War]%20India's%20Ministry%20of%20External%20Affairs%20again%20hit%20by%20virus%2526In-Reply-To=%2526lt;9pa43a%2Bcpd2@eGroups.com">hico
mind@mweb.com.na</a>) which contained an 
attachment called addis.exe

Naturally I did not click on the executable attachment.

Luckily for them, the cover file did not contain any secret info but 
only address lists of Addis Abbaba.

Doesn't MEA practise any security whatsoever?

Ravi V Prasad

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Get your FREE VeriSign guide to security solutions for your web site: encrypting transactions, securing intranets, and more!
http://us.click.yahoo.com/UnN2wB/m5_CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 20:59:53 PST