Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

Fake CIA email, originating with freepers

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » Archives » General Discussion (Through 2005) Donate to DU
 
eridani Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:17 AM
Original message
Fake CIA email, originating with freepers
I didn't get this--it was posted on another of my newsgroups. Anyone else hear anything about it?

X-Apparently-To: via 66.218.79.46; Mon, 21 Nov 2005 13:57:16 -0800
X-YahooFilteredBulk: 71.56.13.2
X-Originating-IP: <71.56.13.2>
Return-Path: <office@cia.gov >
Authentication-Results: mta818.mail.scd.yahoo.com
from=cia.gov; domainkeys=neutral (no sig)
Received: from 207.115.57.66 (EHLO ylpvm35.prodigy.net) (207.115.57.66) "This Website: http://www.freerepublic.com/focus/user-posts?id=135483 , is a Rightwingnut Website."
by mta818.mail.scd.yahoo.com with SMTP; Mon, 21 Nov 2005 13:57:12 -0800
X-Originating-IP: <71.56.13.2>
Received: from sboovqsob.gov (c-71-56-13-2.hsd1.ga.comcast.net <71.56.13.2>)
by ylpvm35.prodigy.net (8.12.10 083104/8.12.10) with SMTP id jALLueOD013479;
Mon, 21 Nov 2005 16:56:43 -0500
From: Office@cia.gov
To: ex-smtp@sbcglobal.net
Date: Mon, 21 Nov 2005 21:55:50 GMT
Subject: Your IP was logged
Importance: Normal
X-Priority: 3 (Normal)
Message-ID: <15eac.fd375ea1a1da36@cia.gov >
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===08053a18.26b9768a7554"
Content-Transfer-Encoding: 7bit

----- Original Message -----
From: <Office@cia.gov >
To: <ex-smtp@sbcglobal.net >
Sent: Monday, November 21, 2005 1:55 PM
Subject: Your IP was logged


Dear Sir/Madam,

we have logged your IP-address on more than 30 illegal Websites.

Important:
Please answer our questions!
The list of questions are attached.


Yours faithfully,
Steven Allison

++++ Central Intelligence Agency -CIA-
++++ Office of Public Affairs
++++ Washington, D.C. 20505

++++ phone: (703) 482-0623
++++ 7:00 a.m. to 5:00 p.m., US Eastern time

Printer Friendly | Permalink |  | Top
Oversea Visitor Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:21 AM
Response to Original message
1. Make a police report
This is serious stuff.
Who ever having fun with this is stupid.
Printer Friendly | Permalink |  | Top
 
Road Scholar Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Nov-25-05 04:29 AM
Response to Reply #1
31. It's illegal as hell!! nt
Printer Friendly | Permalink |  | Top
 
walldude Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:22 AM
Response to Original message
2. There have been a few threads about this
the FBI posted a warning that it was fake. This is the first that I heard it came from the freeps though... hmmm don't they know posing as a federal officer is a crime?
Printer Friendly | Permalink |  | Top
 
kliljedahl Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:24 AM
Response to Original message
3. I've received it twice at work
Edited on Wed Nov-23-05 05:05 AM by kliljedahl
along with my freeper bosses. There was a zip file attached, ostensibly a form to fill out. my Freeper boss opened it and infected his computer. He cannot use his computer now, LOLOL
Printer Friendly | Permalink |  | Top
 
Denile_River Donating Member (10 posts) Send PM | Profile | Ignore Wed Nov-23-05 04:28 AM
Response to Reply #3
6. I got freeped too!
Hi everyone,
I got the fake FBI e-mail too! It was so obvious! Just delete it!
Printer Friendly | Permalink |  | Top
 
Skittles Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:52 AM
Response to Reply #6
10. I don't believe you!
:D
Printer Friendly | Permalink |  | Top
 
area51 Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 06:57 AM
Response to Reply #6
21. Welcome.
Welcome to DU, Denile_River.
Printer Friendly | Permalink |  | Top
 
Denile_River Donating Member (10 posts) Send PM | Profile | Ignore Fri Nov-25-05 02:23 AM
Response to Reply #21
28. Thank you
Thanks for the warm welcome! I hope you all ad a good Turkey Day!
Printer Friendly | Permalink |  | Top
 
newyawker99 Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 10:14 AM
Response to Reply #6
27. Hi Denile_River!!
Welcome to DU!! :toast:
Printer Friendly | Permalink |  | Top
 
Denile_River Donating Member (10 posts) Send PM | Profile | Ignore Fri Nov-25-05 02:28 AM
Response to Reply #27
29. Greetings
Thanks all! Its good to be here! :hi:
Printer Friendly | Permalink |  | Top
 
MiniMe Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:25 AM
Response to Original message
4. Its a virus
Edited on Wed Nov-23-05 04:26 AM by MiniMe
Don't open the file. Looking for exact information, but I've been getting these at work from various email addresses.

http://securityresponse.symantec.com/avcenter/venc/data...

edited to add link
Printer Friendly | Permalink |  | Top
 
WilliamPitt Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:26 AM
Response to Original message
5. This is a virus
Printer Friendly | Permalink |  | Top
 
Tab Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:31 AM
Response to Original message
7. This traces back to a comcast.net mail account
nowhere near freerepublic.

The only thing weird is the comment "This website is a rightwing website".

But I doubt it originated at FR.

One problem with email is it's easy to spoof email coming from anyone, and if you don't know some of the gritty details, on the surface it looks legit.

Hell, I have multiple (published/associated) email accounts, and it's amusing (well, not really) to see one of my accounts "email" or spam one of my other accounts. Obviously they're not coming from me, but someone has harvested the email addresses and are sending it from one to another (and probably many others under my address). Likewise I get spam from people I know but it's obvious they had nothing to do with it, their address is just being used for cover.

It's like writing a letter - you can put anyone's name and address in the return address section.

That doesn't mean they wrote it or sent it, though.
Printer Friendly | Permalink |  | Top
 
AtomicKitten Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:40 AM
Response to Original message
8. I have been spammed so bad I've changed my email address.
I found 47 emails in bulk like that, erased them, came back an hour later and there were 12 more.

I do have cable through Comcast.

I would really like to know where this is coming from.
Printer Friendly | Permalink |  | Top
 
kevinmc Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 04:47 AM
Response to Original message
9. I've Gotten 2 from the FBI..........
I didn't open them. Also I've been getting "Mail not Delivered" virus email's the past few days. I don't open anything unless I know who it's from.

As for the Freeper connection that was what I was thinking it was all coming from.
Printer Friendly | Permalink |  | Top
 
Tab Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:06 AM
Response to Reply #9
12. The "mail not delivered"
is technically legit, but the original mail is not.

What happens is a spammer send out email under your name.

The receiving server gets it, and doesn't accept it, and tells you that your mail was not delivered.

Result: You get all these legitimate notifications that your email was not delivered, but the thing is that you weren't the one sending it out to begin with.

To stay with the "return address" metaphor, someone sends out a bunch of email with your return address, and then everyone writes you to complain or tell you they ignored you.

There's really not much you can do about it, imho. I must get 1000 emails a day at this point, on my different accounts, and it just has grown. Years ago I used to personally trace back each piece of spam, and complain to the ISP; now I just physically wouldn't have enough hours in the day to do it. At some point you just have to tell it to go away. It's like freeway noise - a few noisy trucks in the old days, and you could complain to specific companies if you were so inclined. Get a freeway with constant traffic, and what can you do? You can appeal to a different authority, but you're past the point of addressing each vehicle individually.
Printer Friendly | Permalink |  | Top
 
kevinmc Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:20 AM
Response to Reply #12
14. The one's I am getting show through my Virus.......
protection that they are infected.
Printer Friendly | Permalink |  | Top
 
JoZbean Donating Member (153 posts) Send PM | Profile | Ignore Fri Nov-25-05 09:23 AM
Response to Reply #12
34. Almost correct, but not technically correct
someone sends out a bunch of email with your return address

Actually, the worms will infiltrate an address book and spoof the email addresses. It's part of the 'virus' and not something that someone manually does with 'harvested' email addresses. The virus has built-in programing that randomly selects email addresses out of the infected machine's address book. One of the people that was sent the infected email from 'your' address book will open the attachment and their machine will become infected. The virus code will execute in their address book and the cycle goes on.

It's one way to assure the infected file stays in circulation.

It's always, always best to never ever open attachments from people you don't know and even from people you do know if it's not something you're specifically expecting.

Just added for clarity. Don't mean to step on any toes.
Printer Friendly | Permalink |  | Top
 
Road Scholar Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:14 AM
Response to Reply #9
13. I got one from the FBI. Said I had visited 30 illegal websites.
Then wanted me to answer a questionnaire.
Printer Friendly | Permalink |  | Top
 
kevinmc Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:22 AM
Response to Reply #13
15. One of the FBI emails I got showed a Virus........
it was the second one I got. I haven't opened any of them.
Printer Friendly | Permalink |  | Top
 
kliljedahl Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:02 AM
Response to Original message
11. Mine didn't list a particular website
It said "this IP has visited over 30 prohibited websites". But it did have that zip file attached. DO NOT open it, just delete the E-mail.
Printer Friendly | Permalink |  | Top
 
banana republican Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:25 AM
Response to Original message
16. could this be a "denial of service" attack by FR???
My spam has almost trippled in the past few weeks.

Printer Friendly | Permalink |  | Top
 
RebelOne Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:41 AM
Response to Original message
17. Here's more info on it from CNN.
Printer Friendly | Permalink |  | Top
 
Eugene Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 05:42 AM
Response to Original message
18. My antivirus filter identifies it as the Sober worm.
Clam AV on my mail server called it Sober.U.
Norton AV calls it W32.Sober.X.
Printer Friendly | Permalink |  | Top
 
Cessna Invesco Palin Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 06:10 AM
Response to Original message
19. Part of a big Sober outbreak.
We're getting hit at work as well.
Printer Friendly | Permalink |  | Top
 
mtnester Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 06:14 AM
Response to Original message
20. Virus warning, also appears to come from FBI, CIA, and projected
to also mutate to FEMA, DHA and NSA, as well as other federal state or local agencies. The accompanying attachments a zip file and has the word "list" in it, either alone or with a combination of numbers and letters.

Can I PLEASE have 5 minutes alone in a room with virii and malware/spyware/adware creators? Also hoax emailers? I will settle for 1.5 minutes. I will be unarmed, and I promise not to kill them. I also promise they will cease and desist.
Printer Friendly | Permalink |  | Top
 
The Backlash Cometh Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 07:47 AM
Response to Original message
22. I've been getting tons of this spam in the last three days.
Atleast 25 emails were addressed from the fbi or cia.
Printer Friendly | Permalink |  | Top
 
SheepyMcSheepster Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 08:03 AM
Response to Original message
23. lol, i'm sure the cia uses lots of exclamation points in their letters!
Edited on Wed Nov-23-05 08:03 AM by SheepyMcSheepster
:silly:
Printer Friendly | Permalink |  | Top
 
unhappycamper Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 08:13 AM
Response to Original message
24. snopes.com is your friend
Here's info on the FBI variant:
http://www.snopes.com/computer/virus/fbi.asp
Printer Friendly | Permalink |  | Top
 
MrBenchley Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 08:37 AM
Response to Original message
25. Wow....that IS pathetic
even for the freepers.
Printer Friendly | Permalink |  | Top
 
Rich Hunt Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Nov-23-05 08:57 AM
Response to Original message
26. yeah, I got one, too

I can't remember what the headers said in mine, but it was from inside the US, unlike other dumb spam and forgeries I get.
Printer Friendly | Permalink |  | Top
 
jmowreader Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Nov-25-05 04:27 AM
Response to Original message
30. The FR thread it references is very strange
No liberal would have ever chosen this particular thread to include in a virus he created. All the messages on it have a tag "Threat Matrix - Daily Terror Threat" but none of the messages are terror threats. It almost looks like a DU Lounge thread...some stuff about a woman's breast biopsy, a message from the Zapatistas none of them can figure out, just really strange stuff to claim as proof that FR is a "rightwingnut" website. Trust me on this: there are lots of "kill all the liberals" threads over there that a liberal could point to in proof that FR's a wingnut site.

If anyone of a particular political leaning created the virus, it's a conservative.

However, I think someone fifteen years old who thinks causing a couple billion in damage and getting his name in all the papers is kewl created the damn thing.
Printer Friendly | Permalink |  | Top
 
lakemonster11 Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Nov-25-05 08:47 AM
Response to Original message
32. I think it's truly sad that you can almost always tell
virus emails are fake because of the spelling, grammar, and style errors.

It seems like if you were going to take the time to create a computer virus, you would actually put some effort into the email that's supposed to trick people into getting infected (not that I know why anyone would get some sort of sick thrill out of causing numerous problems for a lot of other people that they don't even know by creating such a virus in the first place :mad:).
Printer Friendly | Permalink |  | Top
 
lonestarnot Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Nov-25-05 08:51 AM
Response to Original message
33. Rugh Ro ... impending doom and bird flu "virus" spread by "internets"
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Mon Dec 29th 2014, 04:55 AM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » Archives » General Discussion (Through 2005) Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC