TigerTeam Online Security (tigerteam-security.com) Spams


Not only does TigerTeam Online Security send spam to incoming mail aliases that do not mail out, Carmen de Witt fails logic 101. Not exactly sure i'd want someone like this auditing a network.

From Carmen@tigerteam-security.com Fri Sep 29 04:55:53 2000
Received: from amsmta03-svc.chello.nl ([213.46.240.7])
	by forced.attrition.org (8.9.3/3.8.9) with ESMTP id JAA08905
	for (staff[at]attrition.org); Thu, 20 Jul 2000 09:27:18 -0600
Received: from carmen ([212.187.63.90]) by amsmta03-svc.chello.nl
          (InterMail vK.4.02.00.10 201-232-116-110 license c8d7c0df87eb6f0faf656a8c66a6cfe9)
          with SMTP id (20000720152332.BFVE27071.amsmta03-svc@carmen)
          for (staff[at]attrition.org); Thu, 20 Jul 2000 17:23:32 +0200
Message-ID: (018a01bff25d$57c0d9c0$0300a8c0@carmen)
Reply-To: "Carmen" (Carmen@tigerteam-security.com)
From: "Carmen" (Carmen@tigerteam-security.com)
To: (staff[at]attrition.org)
Subject: TigerTeam
Date: Thu, 20 Jul 2000 17:15:30 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.72.3110.1
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3

Hi,

TigerTeam Online Security is a group of security experts and computer
scientists. As an independent third party we will find all possible
vulnerabilities in the systems of our clients and advise them on how to
secure them.
To receive our example report based on security problems we solve on a daily
basis mail to: report@tigerteam-security.com
We are now offering free assessments for the Distributed Denial of Service
(DDoS) attacks, Trin00, Tribe and Stacheldraht. If  organisations are
concerned that
their system may be infected with the server part of this software, contact:
research@tigerteam-security.com

Carmen de Witt
www.tigerteam-security.com
Gasthuisstraat  33
5301CB Zaltbommel
+31 418 540440 / fax: +31 418 540806



From: "cult hero" (jericho@attrition.org)
To: (report@tigerteam-security.com)
Sent: Thursday, July 20, 2000 8:36 PM
Subject: TigerTeam (fwd)

I would like to see a sample report of your work.

> ---------- Forwarded message ----------
> From: Carmen (Carmen@tigerteam-security.com)
> To: staff@attrition.org
> Date: Thu, 20 Jul 2000 17:15:30 +0200
> Subject: TigerTeam
>
> Hi,
>
> TigerTeam Online Security is a group of security experts and computer
> scientists. As an independent third party we will find all possible
> vulnerabilities in the systems of our clients and advise them on how to
> secure them.
> To receive our example report based on security problems we solve on a 
> daily basis mail to: report@tigerteam-security.com
> We are now offering free assessments for the Distributed Denial of 
> Service (DDoS) attacks, Trin00, Tribe and Stacheldraht. If  
> organisations are concerned that
> their system may be infected with the server part of this software, 
> contact: research@tigerteam-security.com


From: "Carmen De Witt" (carmen@tigerteam-security.com)
To: "cult hero" (jericho@attrition.org)
Subject: Re: TigerTeam (fwd)
Date: Wed, 15 Nov 2000 01:11:13 -0500

Hi Jericho,

We saw our name on the 'spamming' list on your web site. You asked for
information after we sent a mail to you at your request. Is that 
'spamming'?
Gosh...I have to look in the dictionary before responding to your
requests...

Kind regards,

Carmen de Witt
Tigerteam Security
mailto: carmen@tigerteam-security.com
http://www.tigerteam-security.com
Keizershof
Hoogstraat 7, Otrobanda
Willemstad, Curacao
tel.: + 5999 6687534
fax: + 3120 8645107



Date: Tue, 14 Nov 2000 22:32:21 -0700 (MST)
From: "cult hero" (jericho@attrition.org)
To: Carmen De Witt (carmen@tigerteam-security.com)
Subject: Re: TigerTeam (fwd)

: We saw our name on the 'spamming' list on your web site. You asked for
: information after we sent a mail to you at your request. Is that
: 'spamming'?  Gosh...I have to look in the dictionary before responding
: to your requests...
:
: Kind regards,
:
: Carmen de Witt
: Tigerteam Security

You should look up a few other choice words including 'logic'.

You sent me spam.
Out of curiosity, I replied to it.
You sent me a reply.

Notice here, you sent me 2 pieces of mail. The first was NOT solicited in
ANY way. The second was. Notice that I do not quote the second mail on the
site.

: : ---------- Forwarded message ----------
: : From: Carmen (Carmen@tigerteam-security.com)
: : To: staff@attrition.org

No one sends mail out as staff here, except for a very specific case. A
case which you were not privy to unless your web site was defaced.

This means you harvested that address from our web page or some other spam
list.

Very simple.

: : Hi,
: :
: : TigerTeam Online Security is a group of security experts and computer
: : scientists. As an independent third party we will find all possible
: : vulnerabilities in the systems of our clients and advise them on how 
: : to secure them.
: : To receive our example report based on security problems we solve on a
: : daily basis mail to: report@tigerteam-security.com
: : We are now offering free assessments for the Distributed Denial of 
: : Service (DDoS) attacks, Trin00, Tribe and Stacheldraht. If  
: : organisations are concerned that their system may be infected with the 
: : server part of this software, contact:
: : research@tigerteam-security.com

This is generic spam mail. This is not 'in response' to asking us
anything. The mail was not addressed generically to 'staff' even, let
alone any of the staff members here.



main page ATTRITION feedback