Spam Mail sent with the originating address
naavi@vsnl.com
A spam mail appears to be circulating under the
apparent sender's address naavi@vsnl.com
. The mail gives links to some mp3 downloads from a website called
mp3hava.com.
The mail has not been sent by me and it appears that
either mp3hava.com has hacked into VSNL server and caused the mail to be
sent or otherwise planted a trojan in my or any of my contact's computer
and sent the mail. In either case this is an offence under Section 66 and
66A of the ITA 2008 by mp3hava.com.
I am exploring further action in this regard.
In the meantime those who receive the mail with the
subject "Listen Latest Mp3 Songs Trailers Hindi Telugu Tamil Malayalam
Kannada" may kindly ignore the mail.
Ever since the release of the 3D film "Avtar" where
the name "Naavi" was used by Mr James Cameroon, the name has become a
favourite for all kinds of spammers. For the present it appears that we
may have to live with the situation untill the Avtar fad fades out.
Following is the copy of the mail noticed by me today
in my inbox. It apparently originates from
naavi@vsnl.com. However since no
outward mails are sent by me with this mail ID from my computer, the only
possibility is that the mail server at Tata Indicom could have been
compromised.
Readers are requested to ignore the mail.
The header information of the mail is as follows:
Received: from fe5.internal.vsnl.net ([172.16.28.189])
by fe2.internal.vsnl.net (vsnl mail server fe2) with ESMTP id
<0KY300739UHM31U1@fe2.internal.vsnl.net> for naavi@vsnl.com; Sat, 20 Feb
2010 01:35:47 +0530 (IST)
Content-Transfer-Encoding: 7bit
Received: from W65.net ([65.254.58.90]) by fe5.internal.vsnl.net (vsnl mail
server fe5) with ESMTP id <0KY30092KUHJSC10@fe5.internal.vsnl.net> for
naavi@vsnl.com(ORCPT naavi@vsnl.com); Sat, 20 Feb 2010 01:35:47 +0530 (IST)
Received: from ls956 ([127.0.0.1]) by home with MailEnable ESMTP; Fri, 19
Feb 2010 01:00:00 -0500
X-MIMEOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-TM-AS-Product-Ver: TMAS_OE-5.0.0.1256-6.0.1038-17202006
X-TM-AS-Result: No-Matched White List
X-TM-AS-Engine-Type: TMASE
x-has-been-detected_normal: 1
x-has-been-checked: 1
X-TrendMicro-AntispamAddin-Checked: 1
Date: Fri, 19 Feb 2010 01:00:00 +0000
From: "Naavi" <naavi@vsnl.com>
Subject: Listen Latest Mp3 Songs Trailers Hindi Telugu Tamil Malayalam
Kannada
To: <naavi@vsnl.com>
Message-ID: <0KY30092PUHKSC10@fe5.internal.vsnl.net>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
X-imss-version: 2.054
X-imss-result: Passed
X-imss-scanInfo: M:T L:E SM:1
X-imss-tmaseResult: TT:1 TS:0.0674 TC:1F TRN:50 TV:6.0.1038(17204.000)
X-imss-scores: Clean:100.00000 C:0 M:0 S:0 R:0
X-imss-settings: Baseline:2 C:3 M:3 S:3 R:3 (0.0000 0.0000)
The IP address 65.254.58.90
resolves to an ISP in US
by name Global Net Access, LLC, 1100 White St SW, Atlanta.
The website mp3hava.com is registered to Mp3 Hava, 9,
East 63rd Street, New York 100023, US
Necessary messages have been sent to Tata Indicom,
Global Net Access and Mp3hava.com raising appropriate objections. In case I
receive any reply, the same will be posted here.
Copy of mail sent to
Customerservice@tataindico.com is as follows:
I noticed today that a spam mail is
circulating in my name apparently sent out of the e-mail address
naavi@vsnl.com.
The header information of the mail is
as follows:
Received: from fe5.internal.vsnl.net
([172.16.28.189]) by fe2.internal.vsnl.net (vsnl mail server fe2) with
ESMTP id <0KY300739UHM31U1@fe2.internal.vsnl.net>
for naavi@vsnl.com; Sat, 20 Feb
2010 01:35:47 +0530 (IST)
Content-Transfer-Encoding: 7bit
Received: from W65.net ([65.254.58.90]) by fe5.internal.vsnl.net (vsnl
mail server fe5) with ESMTP id <0KY30092KUHJSC10@fe5.internal.vsnl.net>
for naavi@vsnl.com(ORCPT
naavi@vsnl.com); Sat, 20 Feb 2010
01:35:47 +0530 (IST)
Received: from ls956 ([127.0.0.1]) by home with MailEnable ESMTP; Fri,
19 Feb 2010 01:00:00 -0500
X-MIMEOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-TM-AS-Product-Ver: TMAS_OE-5.0.0.1256-6.0.1038-17202006
X-TM-AS-Result: No-Matched White List
X-TM-AS-Engine-Type: TMASE
x-has-been-detected_normal: 1
x-has-been-checked: 1
X-TrendMicro-AntispamAddin-Checked: 1
Date: Fri, 19 Feb 2010 01:00:00 +0000
From: "Naavi" <naavi@vsnl.com>
Subject: Listen Latest Mp3 Songs Trailers Hindi Telugu Tamil
Malayalam Kannada
To: <naavi@vsnl.com>
Message-ID: <0KY30092PUHKSC10@fe5.internal.vsnl.net>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
X-imss-version: 2.054
X-imss-result: Passed
X-imss-scanInfo: M:T L:E SM:1
X-imss-tmaseResult: TT:1 TS:0.0674 TC:1F TRN:50 TV:6.0.1038(17204.000)
X-imss-scores: Clean:100.00000 C:0 M:0 S:0 R:0
X-imss-settings: Baseline:2 C:3 M:3 S:3 R:3 (0.0000 0.0000)
I request you to kindly investigate
and let me know the origin of this mail. In my computer no outward
mails go under the originating e-mail address of
naavi@vsnl.com since your SMTP
server is not accessible when I connect through my BSNL or Reliance
broadband accounts. Hence I rule out the possibility of any virus
activity at my end.
The possibility is that there could
be a virus activity at your server.
I request you to let me know the
results of your investigation at the earliest
Unquote:
Following is the copy of the mail sent to the ISP at
abuse@gnax.com
Quote:
I understand that you are hosting
the website mp3hava.com. I have today observed that a spam mail is
being sent by mp3hava.com apparently originating from my personal
e-mail address naavi@vsnl.com.
For your information, sending of
such mails is an offence under the Indian laws.
I request you to kindly take steps
that my name is not used in future by any of your clients for such spam
mails. I suggest you send suitable e-mail to all your clients that
"sending mails in false originating address is an offence under Section
66A of Information Technology Act 2000 in India and any sender whether
in India or abroad is liable to be prosectuted under the Act"
I am suggesting this since your
company would also carry vicarious liabilities under the Act and would
be responsible for taking suitable action to prevent occurence of such
offences particularly when this has been brought to your notice.
You may consider this as a notice of
the offence and you are requested to take necessary action.
Kindly confirm the action taken so
that it would be setting a good precedence in handling such instances.
Unquote
Further developments if any would be posted here.
Naavi
February 20, 2010
Comments are Welcome at
naavi@vsnl.com
