OK, mabe it was not that smart on my part, but I used a script on my AD to generate an everyone list so that we could easily send an email to everyone in our domain. We used it to send out informational alerts, instructions, etc.

Recently we recieved an inbound e-mail addressed to everyone@(ourdomain.net). It was a phising page claiming to be from Smith-Barney, with a broke link embedded. The msg source indicated the e-mail was inbound from somewhere in Russia or Japan.

In spite of my e-mail warnings, several users tried to follow the link.

Needless t say, I immediately altered the name of my everyone list. Just a little experience I thought I would pass along.

Thanks for the info. Did any messages sent to the list go anywhere outside the domain?

_________________
MS MVP Security 2006-2008

The list is only made up of users of our domain, so If I understand what you are asking, then no....

hey, aren't the smileys a form of spyware?