The worst spam flood I have seen in a long time...

This must be THE WORST spam flood I've seen in a long time, even worse than the Swiss Jobs spam, and who would have thought *that* would be possible.  Each spam dump comes from a different IP address. Here's hoping not too many people get ripped off.

A quick check of the IP address of a few of these spam-dumps reveals that it is being sent via servers compromised using the MS06-040 vulnerability. When will people learn to patch their systems!!

http://cbl.abuseat.org/lookup.cgi?ip=218.220.228.21

x-sender: vacancy@jobsite.com.au
x-receiver: ****
X-SCL: 8 96.82%
Received: from -1211759344 ([218.220.228.21]) by *** with Microsoft SMTPSVC(6.0.3790.1830);
Thu, 7 Sep 2006 11:56:11 +0800
Received: from jobsite.com.au (-1211598304 [-1213579704])
by zaqdadce415.zaq.ne.jp (Qmailv1) with ESMTP id B27FE2F77C
for <****>; Wed, 06 Sep 2006 22:55:00 -0700
Date: Wed, 06 Sep 2006 22:55:00 -0700
From: "Towering H. Fiddle" <vacancy@jobsite.com.au>
X-Mailer: The Bat! (v2.00.4) Personal
X-Priority: 3
Message-ID: <4588786135.20060906225500@jobsite.com.au>
To: **** <****>
Subject: aussie jobs online
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------AF270C798726A62"
X-AntiVirus: skaner antywirusowy poczty Wirtualnej Polski S. A.
Return-Path: vacancy@jobsite.com.au
X-OriginalArrivalTime: 07 Sep 2006 03:56:12.0949 (UTC) FILETIME=[8F816450:01C6D231]

This is a multi-part message in MIME format.

------------AF270C798726A62
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----------78D61513D01FF86"

------------78D61513D01FF86
Content-Type: multipart/alternative;
boundary="----------B26DA691F192838"

------------B26DA691F192838
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

PRESENTED BY:

Dear recipient,

http://cbl.abuseat.org/lookup.cgi?ip=82.42.173.87&.submit=Lookup

x-sender: vacancy@jobsite.com.au
x-receiver: *******
X-SCL: 8 96.83%
Received: from -1210985864 ([82.42.173.87]) by ****** with Microsoft SMTPSVC(6.0.3790.1830);
  Sun, 3 Sep 2006 03:56:22 +0800
Received: from jobsite.com.au (-1210483120 [-1210641768])
 by 82-42-173-87.cable.ubr06.live.blueyonder.co.uk (Qmailv1) with ESMTP id 79C1AB1F11
 for <*******>; Sat, 02 Sep 2006 14:55:10 -0700
Date: Sat, 02 Sep 2006 14:55:10 -0700
From: "Silencers U. Singapore" <vacancy@jobsite.com.au>
X-Mailer: The Bat! (v2.00.0) Personal
X-Priority: 3
Message-ID: <7030546854.20060902145510@jobsite.com.au>
To: ***** <******>
Subject: aussie jobs online
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="----------27BD9339F6DFA6C"
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.5; AVE: 6.17.0.2; VDF: 6.17.0.5; host: 82-42-173-87.cable.ubr06.live.blueyonder.co.uk)
Return-Path: vacancy@jobsite.com.au
X-OriginalArrivalTime: 02 Sep 2006 19:56:33.0155 (UTC) FILETIME=[E3C25530:01C6CEC9]

This is a multi-part message in MIME format.

------------27BD9339F6DFA6C
Content-Type: multipart/related;
 type="multipart/alternative";
 boundary="----------7B2FE267E71991A"

------------7B2FE267E71991A
Content-Type: multipart/alternative;
 boundary="----------A3260B9459A2849"

------------A3260B9459A2849
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

PRESENTED BY:

Dear recipient,

CarreerOne and SeekAU announces the beginning of a new global employment campaign offering you one more opportunity to earn extra money working in TT Technology sales team.

We are looking for honest, responsible, hard-working people that can dedicate 2-4 hours of their time per day and earn extra 300-500 AUD weekly. All offered positions are currently part-time and give you a chance to work mainly from home.

Please visit TT Tech's corporate web site for more details regarding these vacancies.

Published Mon, Sep 4 2006 2:30 by sandi
Filed under:

Comments

# re: The worst spam flood I have seen in a long time...

Wednesday, September 06, 2006 4:39 AM by Mike
Seeing heaps of these on our mailsystem as well.

# re: The worst spam flood I have seen in a long time...

Thursday, September 07, 2006 6:29 AM by Lex
Here also. The link in those spams even points to a server which doesn't exist (anymore). I hope it exploded in the faces of those who created this spam.

# re: The worst spam flood I have seen in a long time...

Sunday, October 29, 2006 3:36 PM by Broncbuster21
Have been getting at least 7or 8 spams in my mail every time i open it why ?.