Wednesday, December 3. 2003
Really Odd Spam
I've been hearing reports of these really odd spams, but I hadn't seen one -- until now. one just came through to me.Under Outlook or other HTML email clients, you'll see pictures pitching weight loss and Viagra.
Under the clients I use, the HTML is stripped out, and we see:
bobbed melanin immeasurable hydraulic microinstruction couches countermeasures taunts advertise adopted mentally mignon polity ethane excerpt crevice menial hug ideologically tankers saponify scrupulosity hut maul expansion bong screw
credited activate satisfactions accomplish accused crowder poems tenaciously measuring creepers meld expurgate scimitar tenth scheduled practicable test sculpted pocus tainted addition botanical bateman araby exclusivity idiosyncrasies potentiometer
possessively tautly bertrand adduce screeches adamantly teleost poker teaches telephotography melodiousness practise blair et hugeness agnes athens satan acrobat hungriest postulate possessors scription textually tenfold tailwind expertness
acerbic atropos police plutonium powerless excited counsellors screening matriculation brainstems theatrical accommodating creations hovel tardy telemetric branchings bombed mercury teachings poland excellency boiler
maturing acumen mercy meetinghouse telecommunications crank scruple immaculately tapeworm terraced admitter material expeditious scrawls exploring birmingham bodily admonished scratched posits adoration critic mediate mediation expired expounding bologna
expects savagers hydrology horsehair portions creditable aaa cranes hydrangea adroitness augustus abigail teletype scrupulously taker iconoclast telegraphed crisscross evidence boustrophedon admiralty boisterous adequately plebiscite illiterate tagged bartok
Odd. I think the spammers are attempting to bypass Baysian filters by filling the email up with unique words that should have high 'acceptable' scores. Also, by associating 'bong' and 'screw' with 'potentiomenter' and 'adroitness' they're attempting to train the filters for future spams. Of course, a 'spamassassin --add-to-blacklist' and then a 'spassassin -a' will train it as spam for next time
The full source of the email is in the extended entry.
Spammers are scum.
Return-Path: <jus@AOL.COM>
X-Original-To: jalcorn@bigfoot.jalcorn.net
Delivered-To: jalcorn@bigfoot.jalcorn.net
Received: from localhost (localhost [127.0.0.1])
by bigfoot.groovysecurity.com (Postfix) with ESMTP id 51E4CD8026
for <jalcorn@bigfoot.jalcorn.net>; Wed, 3 Dec 2003 10:58:35 -0500 (EST)
Received: from bigfoot.groovysecurity.com ([127.0.0.1])
by localhost (bigfoot [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 14885-01 for <jalcorn@bigfoot.jalcorn.net>;
Wed, 3 Dec 2003 10:58:34 -0500 (EST)
Received: by bigfoot.groovysecurity.com (Postfix, from userid 511)
id CBD9FD8027; Wed, 3 Dec 2003 10:58:34 -0500 (EST)
Received: from genesee-bdnfcwc.genesee.com (ip67-94-98-100.z98-94-67.customer.algx.net [67.94.98.100])
by bigfoot.groovysecurity.com (Postfix) with ESMTP id 319C3D8026
for <justin@jalcorn.net>; Wed, 3 Dec 2003 10:58:30 -0500 (EST)
Received: from tenting ([198.164.125.16]) by genesee-bdnfcwc.genesee.com with Microsoft SMTPSVC(5.0.2195.6713);
Wed, 3 Dec 2003 07:58:59 -0800
Date: Wed, 3 Dec 2003 16:06:03 GMT
From: "Corazon Tran" <jus@AOL.COM>
To: justin@jalcorn.net
Subject: plotting america
Mime-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <GENESEE-BDNFCWCv1cO00005902@genesee-bdnfcwc.genesee.com>
X-OriginalArrivalTime: 03 Dec 2003 15:58:59.0968 (UTC) FILETIME=[5D759800:01C3B9B6]
X-Virus-Scanned: by VirusKilla at groovysecurity.com
Lines: 17
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
bigfoot.jalcorn.net
X-Spam-Level: **
X-Spam-Status: No, hits=2.6 required=5.0 tests=BAYES_44,HTML_60_70,
HTML_FONT_INVISIBLE,HTML_MESSAGE,MIME_HTML_ONLY,
RCVD_IN_BL_SPAMCOP_NET autolearn=no version=2.60
<html>
<body>
<a href="http://srd.yahoo.com/drst/alvin/*http://www.blend323d.com/in/">
<img border="0"
src="http://srd.yahoo.com/drst/adversariesexammilliampereborrowed/*http://backrefdvc.com/picnic.jpg">
</a>
<font color="#ffffff">bobbed <font color="#ffffff">melanin <font color="#ffffff">immeasurable <font color="#ffffff">hydraulic <font color="#ffffff">microinstruction <font color="#ffffff">couches <font color="#ffffff">countermeasures <font color="#ffffff">taunts <font color="#ffffff">advertise <font color="#ffffff">adopted <font color="#ffffff">mentally <font color="#ffffff">mignon <font color="#ffffff">polity <font color="#ffffff">ethane <font color="#ffffff">excerpt <font color="#ffffff">crevice <font color="#ffffff">menial hug ideologically tankers saponify scrupulosity hut maul expansion bong screw<p>
<font color="#ffffff">credited <font color="#ffffff">activate <font color="#ffffff">satisfactions <font color="#ffffff">accomplish <font color="#ffffff">accused <font color="#ffffff">crowder <font color="#ffffff">poems <font color="#ffffff">tenaciously <font color="#ffffff">measuring <font color="#ffffff">creepers <font color="#ffffff">meld <font color="#ffffff">expurgate <font color="#ffffff">scimitar <font color="#ffffff">tenth <font color="#ffffff">scheduled <font color="#ffffff">practicable <font color="#ffffff">test sculpted pocus tainted addition botanical bateman araby exclusivity idiosyncrasies potentiometer<p>
<font color="#ffffff">possessively <font color="#ffffff">tautly <font color="#ffffff">bertrand <font color="#ffffff">adduce <font color="#ffffff">screeches <font color="#ffffff">adamantly <font color="#ffffff">teleost <font color="#ffffff">poker <font color="#ffffff">teaches <font color="#ffffff">telephotography <font color="#ffffff">melodiousness <font color="#ffffff">practise <font color="#ffffff">blair <font color="#ffffff">et <font color="#ffffff">hugeness <font color="#ffffff">agnes <font color="#ffffff">athens satan acrobat hungriest postulate possessors scription textually tenfold tailwind expertness<p>
<a href="http://srd.yahoo.com/drst/exploitation/*http://www.qt323dss.com/ma/">
<img border="0"
src="http://srd.yahoo.com/drst/milkweedacquiescesexactadjoin/*http://www.gbbvbv5cv.com/thank.gif">
</a>
</p><font color="#ffffff">acerbic <font color="#ffffff">atropos <font color="#ffffff">police <font color="#ffffff">plutonium <font color="#ffffff">powerless <font color="#ffffff">excited <font color="#ffffff">counsellors <font color="#ffffff">screening <font color="#ffffff">matriculation <font color="#ffffff">brainstems <font color="#ffffff">theatrical <font color="#ffffff">accommodating <font color="#ffffff">creations hovel tardy telemetric branchings bombed mercury teachings poland excellency boiler</body>
<font color="#ffffff">maturing <font color="#ffffff">acumen <font color="#ffffff">mercy <font color="#ffffff">meetinghouse <font color="#ffffff">telecommunications <font color="#ffffff">crank <font color="#ffffff">scruple <font color="#ffffff">immaculately <font color="#ffffff">tapeworm <font color="#ffffff">terraced <font color="#ffffff">admitter <font color="#ffffff">material <font color="#ffffff">expeditious <font color="#ffffff">scrawls <font color="#ffffff">exploring <font color="#ffffff">birmingham <font color="#ffffff">bodily admonished scratched posits adoration critic mediate mediation expired expounding bologna<p>
<font color="#ffffff">expects <font color="#ffffff">savagers <font color="#ffffff">hydrology <font color="#ffffff">horsehair <font color="#ffffff">portions <font color="#ffffff">creditable <font color="#ffffff">aaa <font color="#ffffff">cranes <font color="#ffffff">hydrangea <font color="#ffffff">adroitness <font color="#ffffff">augustus <font color="#ffffff">abigail <font color="#ffffff">teletype <font color="#ffffff">scrupulously <font color="#ffffff">taker <font color="#ffffff">iconoclast <font color="#ffffff">telegraphed crisscross evidence boustrophedon admiralty boisterous adequately plebiscite illiterate tagged bartok<p>
</html>
Trackbacks
Trackback specific URI for this entry
No Trackbacks