# Email Warning!

**URL:** <https://forum.cirruspilots.org/t/email-warning/40340>\
**Category:** Guest Discussion\
**Created:** [June 26, 2003, 8:14pm UTC](https://forum.cirruspilots.org/t/email-warning/40340 "2003-06-26T20:14:40Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![caseyj](https://sea1.discourse-cdn.com/copa/user_avatar/forum.cirruspilots.org/caseyj/32/14_2.png) [@caseyj](https://forum.cirruspilots.org/u/caseyj)\
**Post date:** [June 26, 2003, 8:14pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/1 "2003-06-26T20:14:40Z")

</div>

I just received an email from one of our members that was very upset that I had sent him an email with the subject, Â“Re. MovieÂ”, that had some sort of attachment connected to it. I did not in fact send this to any member. I think that some type of email grabber has gotten our addresses and is sending out bogus emails in our names to each other.

After having my IT guy check this out, he has found that I too received this email earlier this morning but that our company spam eliminator had blocked it.

This is just a heads up. IÂ’m not sure what to do about it, other than to warn everyone that if you get anything with Â“Re. MovieÂ” in the subject line delete it.

---

<div class="post-metadata">

**Author:** ![gordonf](https://sea1.discourse-cdn.com/copa/user_avatar/forum.cirruspilots.org/gordonf/32/17_2.png) [@gordonf](https://forum.cirruspilots.org/u/gordonf)\
**Post date:** [June 26, 2003, 10:48pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/2 "2003-06-26T22:48:02Z")

</div>

I received TWO emails, supposedly from members, with ZIP file attachments that of course I did not open. In my case the subject was “Re: Application.”  
This may have tapped into an old list, as the email address it used for me is one I haven’t used on the Forum in a very long time.  
So, everybody, **be careful out there** and never open an attachment that you are not specifically expecting. Duh.

---

<div class="post-metadata">

**Author:** ![fallows](https://avatars.discourse-cdn.com/v4/letter/f/da6949/32.png) [@fallows](https://forum.cirruspilots.org/u/fallows)\
**Post date:** [June 26, 2003, 11:37pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/3 "2003-06-26T23:37:53Z")

</div>

This is not a COPA thing but an all-points virus. I’ve received 30 or 40 of them today, varying subject lines but all with the Your\_Details.ZIP attachment. Ah virus, ah spam, amazing email works as well as it does.

---

<div class="post-metadata">

**Author:** ![dennstae](https://avatars.discourse-cdn.com/v4/letter/d/8edcca/32.png) [@dennstae](https://forum.cirruspilots.org/u/dennstae)\
**Post date:** [June 27, 2003, 12:07am UTC](https://forum.cirruspilots.org/t/email-warning/40340/4 "2003-06-27T00:07:04Z")

</div>

So far no such e-mails on my end…I’m feeling a little left out. [:(]

---

<div class="post-metadata">

**Author:** ![Paul\_White](https://sea1.discourse-cdn.com/copa/user_avatar/forum.cirruspilots.org/paul_white/32/26_2.png) [@Paul\_White](https://forum.cirruspilots.org/u/Paul_White)\
**Post date:** [June 27, 2003, 2:01pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/5 "2003-06-27T14:01:35Z")

</div>

Same here.have gotten several “your\_details.zip” emails. Norton caught them all but they are out there…be vigilent as always!

Paul  
N925PW

---

<div class="post-metadata">

**Author:** ![mikerad](https://sea1.discourse-cdn.com/copa/user_avatar/forum.cirruspilots.org/mikerad/32/11_2.png) [@mikerad](https://forum.cirruspilots.org/u/mikerad)\
**Post date:** [June 26, 2003, 10:56pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/6 "2003-06-26T22:56:39Z")

</div>

I received a strange twist on this – a “Failure to Deliver” notice, also for an email “Re: Application”, also with an attached .ZIP file; that I supposedly sent to another COPA member at 10:44 a.m. this morning.  
Only… I sent no such email… so whoever DID send it spoofed my email SMTP info well enough that when it bounce, I got the bounce.  
So, I echo your caution: **Be careful!**

- Mike.

---

<div class="post-metadata">

**Author:** ![cnsanford](https://sea1.discourse-cdn.com/copa/user_avatar/forum.cirruspilots.org/cnsanford/32/85958_2.png) [@cnsanford](https://forum.cirruspilots.org/u/cnsanford)\
**Post date:** [June 26, 2003, 10:57pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/7 "2003-06-26T22:57:44Z")

</div>

There is a [report](http://biz.yahoo.com/rc/030626/tech_virus_sobig_1.html) on Yahoo about a new virus using spoofed email addresses.

-Curt

---

<div class="post-metadata">

**Author:** ![n224az](https://avatars.discourse-cdn.com/v4/letter/n/4af34b/32.png) [@n224az](https://forum.cirruspilots.org/u/n224az)\
**Post date:** [June 26, 2003, 10:58pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/8 "2003-06-26T22:58:49Z")

</div>

It’s interesting how this thing is attaching itself to COPA members. I just received the “Movie” email on my companies email (it was flagged by our virus software).  
I do not list that address on COPA. I’m suspecting that I got it from another COPA member who emailed me (he knows my work email) from his company’s email. (which is not also listed on COPA).  
The reason I suspect this is that I have not received any private messages on my companies email in months other than this one.

No harm done.

Walt

---

<div class="post-metadata">

**Author:** ![caseyj](https://sea1.discourse-cdn.com/copa/user_avatar/forum.cirruspilots.org/caseyj/32/14_2.png) [@caseyj](https://forum.cirruspilots.org/u/caseyj)\
**Post date:** [June 27, 2003, 1:48am UTC](https://forum.cirruspilots.org/t/email-warning/40340/9 "2003-06-27T01:48:35Z")

</div>

Bingo! Just got my own “Re: Application.”

At least we know what to look for.

---

<div class="post-metadata">

**Author:** ![fidodogm](https://avatars.discourse-cdn.com/v4/letter/f/a8b319/32.png) [@fidodogm](https://forum.cirruspilots.org/u/fidodogm)\
**Post date:** [June 27, 2003, 1:50am UTC](https://forum.cirruspilots.org/t/email-warning/40340/10 "2003-06-27T01:50:27Z")

</div>

I got the email a few days ago…didn’t recognize the sender or subject and immediately deleted it as a potential virus. So this started early in the week. I don’t remember the sender…could’ve been from a COPA “member” (or a hijacked member’s email address, more likely)…but I do remember it was a zip file and the word “application”.

My very robust anti-virus did not catch or note it as a virus, probably because it was not opened?

Anyway, as we say here on the left coast “cuidado!”…

---

<div class="post-metadata">

**Author:** ![cfiatp](https://sea1.discourse-cdn.com/copa/user_avatar/forum.cirruspilots.org/cfiatp/32/42_2.png) [@cfiatp](https://forum.cirruspilots.org/u/cfiatp)\
**Post date:** [June 27, 2003, 4:16am UTC](https://forum.cirruspilots.org/t/email-warning/40340/11 "2003-06-27T04:16:59Z")

</div>

I’ve received all variations mentioned of this email today. My auto virus scan caught all of them…luckily, I just updated its database this morning!

Hey, could be worse…at least its not Monkey Pox! [;)]

Fly Safe,  
~Matt McDaniel  
[Progressive Aviation Services](http://www.progaviation.com)

---

<div class="post-metadata">

**Author:** ![n224az](https://avatars.discourse-cdn.com/v4/letter/n/4af34b/32.png) [@n224az](https://forum.cirruspilots.org/u/n224az)\
**Post date:** [June 27, 2003, 12:09am UTC](https://forum.cirruspilots.org/t/email-warning/40340/12 "2003-06-27T00:09:22Z")

</div>

Scott,

If it will make you feel better, I’ll forward one to you. [;)]

Walt

---

<div class="post-metadata">

**Author:** ![dennstae](https://avatars.discourse-cdn.com/v4/letter/d/8edcca/32.png) [@dennstae](https://forum.cirruspilots.org/u/dennstae)\
**Post date:** [June 27, 2003, 2:02am UTC](https://forum.cirruspilots.org/t/email-warning/40340/13 "2003-06-27T02:02:23Z")

</div>

Walt,

I don’t care what they say about you…you sure are the nicest guy in COPA! [;)]

---

<div class="post-metadata">

**Author:** ![n224az](https://avatars.discourse-cdn.com/v4/letter/n/4af34b/32.png) [@n224az](https://forum.cirruspilots.org/u/n224az)\
**Post date:** [June 27, 2003, 4:48pm UTC](https://forum.cirruspilots.org/t/email-warning/40340/14 "2003-06-27T16:48:35Z")

</div>

> In reply to:
> 
> * * *
> 
> you sure are the nicest guy in COPA!
> 
> * * *

Aw shucks! Now you made me blush!

Walt  
 ![1-52220-blush.jpg](https://global.discourse-cdn.com/copa/original/3X/0/e/0ee555da302ef77d1f8d3e01d7e6f37a442e2235.jpeg)
