Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Update on Postcard virus emails SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Update on Postcard virus emails
One of our readers made an interesting observation, one which I have confirmed with the headers of the emails that I have received with the Nuwar virus.  All of the emails have a common user agent:  Thunderbird 1.5.0.9 (Windows/20061207).  I am not sure of the significance of this, but it is an interesting observation.

Thanks Karl for the information.

Deborah

279 Posts
ISC Handler
Dec 31st 2006

Sign Up for Free or Log In to start participating in the conversation!