Date: Wed, 16 Oct 1996 13:09:54 -0700 (PDT)
From: James Lick
To: "Aliza R. Panitz"
Subject: Re: Holy shit, I'm under attack!

You've just been attacked using a program called UpYours.  It is a 
forging mail bombing program for Win95 which attempts to subscribe a 
victim to as many mailing lists as possible.  My list server, 
Majordomo@tcp.com was one of a handful of default list servers 
distributed in the package, so it has been dealing with these since May.  
You may have heard me grumbling about ibm.net in the spam groups because 
they have yet to stop a user in Indonesia from using this on a daily 
basis.

Anyways, there's a list for victim sites and individuals of this attack:

	Majordomo@micron.net: subscribe tracker

You can visit the UpYours distribution site at www.nacho.com.

Here are the headers received at tcp.com:

>From buglady@ability.net  Wed Oct 16 12:44:39 1996
Received: from smtp.clever.net (qmailr@smtp.clever.net [208.5.7.252]) by 
tcp.com (8.7.5/8.6.10) with SMTP id MAA23709 for <majordomo@tcp.com>; 
Wed, 16 
Oct 1996 12:44:38 -0700 (PDT)
From: buglady@ability.net
Message-Id: <199610161944.MAA23709@tcp.com>
Received: (qmail-queue invoked by uid 0); 16 Oct 1996 19:38:39 -0000
Received: from unknown (HELO ) (205.185.60.2) by smtp.clever.net with 
SMTP; 16 
Oct 1996 19:38:39 -0000
DATE: 16 Oct 96 12:44:30 PM
TO: majordomo@tcp.com
SUBJECT: subscribe lullaby


They like to use broken smtp servers which do not report the origin 
hostname, so not much you can do here but yell at the folks at clever.net.

-- James Lick --