[cobalt-security] Email Issues - Bogus, but confusing to users... Could confuse yours !

["Chuck Lewis" <clewis@xxxxxxxxxx>]

Hi Folks,

Know the nasty virus is on the loose but look what we got today (I have
replaced the user name of our employee with Jan.Doe):

==========================================================================
From: management@xxxxxxxxxxxxx [mailto:management@xxxxxxxxxxxxx] 
Sent: Wednesday, March 03, 2004 11:21 AM
To: Jan.Doe@xxxxxxxxxxxxx
Subject: Warning about your e-mail account.

Hello  user of Leesupply.net  e-mail server,

Some of our  clients  complained  about the spam (negative e-mail

content)

outgoing from your e-mail account.  Probably, you have been  infected by a
proxy-relay trojan server. In order to keep your  computer safe, follow the
instructions.

Please, read the attach for further  details.

For security purposes  the attached file is password  protected. Password is
"12510".

Have a good day,

   The  Leesupply.net team

http://www.leesupply.net
==========================================================================

and attached there is a 12KB file TextDocument.zip

We obviously have no "management@xxxxxxxxxxxxx" address setup but this was
definitely confusing users.

Is there know way to track this source down ?

If nothing else, this is a "head's up" for what your users are seeing and
how confusing it could be to them...

Thanks !

Chuck