Okay, you guys are all smart enough not to need telling, but a new (to me) spoof email purportedly from ntlworld seems to be doing the rounds. The subject line is "E-mail account disabling warning.", it made it through spampal's reg-ex filter pretty easily, and the one I got, did come from an IP in ntl space.
Body text etc as follows:
Dear user, the management of Ntlworld.com mailing system wants to let you
know that,
Some of our clients complained about the spam (negative e-mail content)
outgoing from your e-mail account. Probably, you have been infected by
a proxy-relay trojan server. In order to keep your computer safe,
follow the instructions.
Please, read the attach for further details.
Attached file protected with the password for security reasons. Password
is 75403.
Cheers,
The Ntlworld.com team
http://www.ntlworld.com
----------rqljbnhfjjaaegyvcict
Content-Type: application/octet-stream; name="Info.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Info.zip"
... then a load of base 64 crap.
Join CF
You are here: 
