Thursday, October 2, 2008

Spam slowdown

I've noted a spam slowdown. At first, I noticed a decline in links to EXE files. Now I am noting a reduction in SPAM experiments. This includes hiding a url, letter by letter in an HTML table. This seems to corolate witht the slowdown in other sectors of the American economy. Namely, the reduction in raw materials to Brazil, Russia, India and China. (Labeled, "the drop of the bric" by Jim Crammer of Mad Money on CNBC).

To this I am adding that my spam filters have jumped from 2-4% pass through to 1/2 of 1%. That is to say, usually I have 2-4% of all spam that makes it through the spam filter (given I get every payload marker). It appears that I am catching 99.4% now. I don't think my filters are better, or that I have all their domains, or payoff domains. I should also mention that the penny stock scams have stopped too.

I think in a few weeks we will know the answer.

Glossary

-tc

Sunday, September 7, 2008

Where's the exe

M$ must have put out a working trojan trap because I have not seen any exe files in about week.

BTW, the .cn domains are back in full force. It seems they took off for the Olympics, then took an extra week off.

I should also note the spam being sent in an HTML table continutes.

tc

Saturday, August 16, 2008

Filter Working Well

Filtering using previous tags is up from approximately 1/2 to 3/4 being filtered out. Meaning either the spammers have a fixed number to deal with or some spammers are not sending right now. Notable the .cn domains have been lacking since the Olympics began.

tc

Monday, August 11, 2008

creative non-sense

Today someone decide to hide the letter of their payload in a HTML table. I predicite failure on their end. I give it 3 weeks at most.

Another spammer decided the person receiving the spam should remove some stars, such as:

http://sa*****vemake.com Remove all the *****

I'm sure this will be equally successful.

tc

Tuesday, July 29, 2008

Swish (flash) stored on images sites really spam

This blew my mind.

img137.imageshack.us/img137/5418/30096901zt5.swf

tc

Fake News on the horizon

Slight twist on an oldie. They are using the following domains to send out fake news leads like:

"The FBI can watch you on facebook"

Once you get there you can download the supposed storied. Of course, it is a trojan horse.

BestValueNews.com
CompanyNewsNetwork.com
FedNewsWorld.com
GoodNewsGames.com

Here are a few more
StockLowNews.com
ToplessDailyNews.com
ToplessNewsRadio.com
WapDailyNews.com
SmartNewsRadio.com

tc

An Anynomizer becomes a shill

I guess it was always out there.

hiderefer.com/ohyZAlil.htm

tc