On Tue, 2006-05-23 at 02:45, Paul Howarth wrote:
I don't think that's what this is. Form spam takes advantage
of
poorly-coded mail/contact forms and uses them to send mail to recipients
other than those intended by the form designer.
What's happening here is that the spammer is running their own code
(downloaded into /tmp) to send the mail, a rather more serious
situation.
If you have ssh access open there's a fair chance that someone
has done a brute-force password guess. There is a lot of
that going around. Or you didn't apply all of the current
updates before exposing the system to the internet.
--
Les Mikesell
lesmikesell(a)gmail.com