Threat Level: green Handler on Duty: Daniel Wesemann

SANS ISC: Update on Postcard virus emails SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Update on Postcard virus emails
One of our readers made an interesting observation, one which I have confirmed with the headers of the emails that I have received with the Nuwar virus.  All of the emails have a common user agent:  Thunderbird 1.5.0.9 (Windows/20061207).  I am not sure of the significance of this, but it is an interesting observation.

Thanks Karl for the information.

Deborah

279 Posts
ISC Handler
Dec 31st 2006

Sign Up for Free or Log In to start participating in the conversation!