================================================================
This example incident report is void - for testing purposes only
================================================================
From: Site Security Contact <irt@my-university.edu>
To: cert@my-example-cert.org
Cc: Jim Person <Jim.Person@my-university.edu
Subject: False sender of email (MYUNI#22)
Reply-To: incidenthandling_system@my-university.edu
Date:   10 Oct 2001 12.01.22 -0500
In-Reply-To: Jim Person's message of "Sat, 10 Oct 2001 11:22:12 -0500"

Hello My_example-Cert!

It has come to our knowledge that someone, without mr Person:s permission,
has sent out mail regarding virus updates to a large number of students on
European universities. The mail had the subject "Important! Update your
anti-virus program now". He wants to make it fully clear that neither this
message, nor the attached virupdat.exe file was sent by him.

The exe-file seems to contain some virus/trojan of unknown origin.
Please inform all receivers of this mail that they should not
open or execute the attachment. All known mail seems to have been sent
via mail.my-university.edu, but since we do not have any logs of
outgoing mail traffic we cannot tell where.

Yours sincerely,
Eric Person, My University IRT team