Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

The new way spammers uses for delivering their messeges...

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam
View previous topic :: View next topic  
Author Message
c0mplex
Junior Member


Joined: 21 Mar 2005
Last Visit: 28 Apr 2005
Posts: 11

PostPosted: Mon Mar 21, 2005 4:24 am    Post subject: The new way spammers uses for delivering their messeges... Reply with quote

Spammers are now using a new way in order to deliver their messeges. It is called Trigger Mail.

Example of a message:

Breaking News.

Would you ref inance if you knew you'd SAVE TH0USANDS?

We'll get you lnterest as low as 3.89%.

Have Bad c(r)edit? No Problem! Low rates are fixed no matter what.

Fill out our small online form and we'll show you how.

Get the house and/or car you always wanted, it only takes 2 minutes of your time:

ez-rate.info/bud

Noted the difference?

They no longer use fancy colors html pages in their messages, just simpel ASCII text.

Just wanna inform you all...
_________________
SpyWare are our enemies!
Mozilla FireFox is the best!
Knowledge Management
Back to top
View user's profile Send private message
Blinn
Warrior Guru


Joined: 10 Nov 2004
Last Visit: 15 Apr 2009
Posts: 424
Location: San Francisco, CA

PostPosted: Mon Mar 21, 2005 2:16 pm    Post subject: Reply with quote

If I can't determine in a blink of an eye whether a message is important, it is deleted without hesitation or further investigation. So far so good Laughing .
Back to top
View user's profile Send private message
ld
Warrior


Joined: 01 Mar 2005
Last Visit: 29 Jul 2010
Posts: 185

PostPosted: Mon Mar 21, 2005 9:22 pm    Post subject: Reply with quote

I've seen plain text only spams for quite some time, some even much shorter than the one posted. Spamassassin generally doesn't have too much trouble with them. With any spam the source address will turn up in RBL's eventually. If there are URL's like in the example posted that will turn up in a URI blacklist. The bayenesian filters are good at learning these plain text emails. The obfuscated refinance and bad credit can be picked up easily with the perl regular expression rules. I prefer the obfuscation because then I know someone is up to something, opposed to them not trying to hide it.

I'm more interested in what spammers are doing to to evade certain anti-spam products. Such as about a month ago a spammer was putting ^M (windows newline character) in the middle of URL's. The URL would still work but the ^M character broke spamassassins URI matcher. Spamassassin had this fixed in under 24 hours since the bug report was filed. Things like this are good to keep track of because you can add rules to pick up people trying to exploit these bugs.
Back to top
View user's profile Send private message
c0mplex
Junior Member


Joined: 21 Mar 2005
Last Visit: 28 Apr 2005
Posts: 11

PostPosted: Tue Mar 22, 2005 4:10 am    Post subject: Reply Reply with quote

I know about the black lists, but what if the spammer is using TinyUrl?
_________________
SpyWare are our enemies!
Mozilla FireFox is the best!
Knowledge Management
Back to top
View user's profile Send private message
ld
Warrior


Joined: 01 Mar 2005
Last Visit: 29 Jul 2010
Posts: 185

PostPosted: Tue Mar 22, 2005 5:53 am    Post subject: Reply with quote

Spamassassins or more specifically the SpamCopUri code in it is able to resolve tinyurl among others. It will follow it through 4 redirections deep. Also many of these sites use URI blacklists or other means to prevent spammers from using their service. This is likely why you don't see alot of spammers trying to take advantage of sites like these.
Back to top
View user's profile Send private message
c0mplex
Junior Member


Joined: 21 Mar 2005
Last Visit: 28 Apr 2005
Posts: 11

PostPosted: Tue Mar 22, 2005 6:29 am    Post subject: Reply Reply with quote

Really? If it is so, then spammers should have a bad time trying to deliver their messages, don't they? Laughing
_________________
SpyWare are our enemies!
Mozilla FireFox is the best!
Knowledge Management
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group