FBI being spoofed

Funny,
My ISP e mail account has zero spam.
I dont even give this account out to anyone.
Im lucky if I get 2 peices of E Mail a week from this account.

Well guess what was waiting on me today?

From: Admin@fbi.gov

Subject: You visit illegal websites

Dear Sir/Madam,

we have logged your IP-address on more than 40 illegal Websites.

Important: Please answer our questions!
The list of questions are attached.


Yours faithfully,
M. John Stellford



Federal Bureau of Investigation -FBI-
935 Pennsylvania Avenue, NW, Room 2130 Washington, DC 20535
(202) 324-3000

indictment_cit3449.zip had a sobig worm in it.


Return-Path: <Admin@fbi.gov>
Delivered-To:
Received: (qmail 15746 invoked by uid 0); 22 Feb 2005 18:01:34 -0000
Received: from 66.83.67.18.nw.nuvox.net (HELO sfnjbst.gov) (66.83.67.18)
by spamlite3.knology.net with SMTP; 22 Feb 2005 18:01:34 -0000
From: Admin@fbi.gov
To: 3Abmeserve@knology.net
Date: Tue, 22 Feb 2005 17:34:58 UTC
Subject: You visit illegal websites
Importance: Normal
X-Priority: 3 (Normal)
Message-ID: <157a9ec.6467a0a3@fbi.gov>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary= "=====7ab8a5cd372cbeaedb828 "
Content-Transfer-Encoding: 7bit
This is a multi-part message in MIME format.

 

Right off hand I would say one of the few people who have your email address is infected with the Sobig virus. It has it's own emailer, it just needs an address book to look at. More on this here.
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

BTW, that email came from someone who uses a ISP owned by NuVox Communications, Inc. in Greenville, SC.