To: DMaA who wrote (18539 ) 3/31/1999 7:52:00 AM From: David Lawrence Read Replies (1) | Respond to of 22053
I'll bet this certain someone's hair is standing on end.Melissa Traced To Its Source Melissa, the E-mail-borne virus carrying the header "Important Message," has been traced to its roots. Newsgroup-sniffing software from security vendor Network Associates Inc. discovered where the virus was first posted: at the alt.sex newsgroup. A search of the file spotted an origin time close to the time it was published on the newsgroup. Network Associates researchers at the vendor's Anti-Virus Emergency Response Team (AVERT) lab identified an AOL user with the moniker "Sky Roket" as the person who first posted the virus. The FBI is searching for this person. The Melissa virus, which sends 50 infected E-mail messages with a list of pornographic sites to recipients named in the end user's address book, first surfaced late Friday. Late Monday, the inevitable follow-on to the Melissa virus made its first appearance. Named Papa, this new Excel virus works in a similar way to the Melissa bug. Papa arrives via E-mail, claiming to be sent by "all.net" or "Fred Cohen" in the end user's inbox, and then replicates, mailing itself to the first 60 users in the address book. -- Amy K. Larsen, InformationWeek Daily He does seem to have a somewhat wide yet narrow scope of interest:dejanews.com [ST_rn=ps]/profile.xp?author=skyroket@aol.com%20(Sky%20Roket)&ST=PS Edit: Tht plot thickens:CLOSING IN ON MELISSA Investigators are closing in on the author of the Melissa virus - avteenage hacker known as VicodinES, associated with the Source of Kaos "free speech" group at sourceofkaos.com (which promptly went off the Net last night). Behind him is another shadowy hacker, Alt-FII, tied to the Alternative Virus Mafia at codebreakers.org according to some nifty work by Phar Lap Software and ZDNet. It seems Melissa was unleashed from an AOL account stolen a year ago. Phar Lap used the recently-discovered feature in Microsoft which embeds a unique ID in every Office document to trace Melissa to its source. The FBI says grimly: "We're actively investigating."