Eastern Mennonite University

Security alerts, advisories and notifications for the EMU community.

September 10, 2003

Annoying emails

Many people have complained about bounced or returned email messages--messages that they never wrote. These messages are an unfortunate side-effect of viruses like sobig which propagate themselves via email. Computers infected by these viruses send out a large number of email messages to real or imaginary email addresses and, to avoid detection, fake or "spoof" the return address on the messages. When the messages cannot be delivered--as often happens because the addresses aren't legitimate, or because mail servers like ours detect the virus attached to the message--mail servers often try to notify the sender via the return address. Since the viruses fake the return address, however, these notifications are not sent to the true sender but to the listed return address--an address that may belong to you.

Because these notifications are a normal part of the email system, and because it is often helpful to know that a message you sent could not be delivered--if you're emailing a friend or family member, for example--InfoSys cannot block them; our advice is to simply delete the messages and try not to feel too frustrated by them. If it helps to keep things in perspective, several InfoSys-maintained email accounts receive hundreds of these messages each week. Posted by ben beachy at September 10, 2003 09:46 AM
Comments