I've noted a spam slowdown. At first, I noticed a decline in links to EXE files. Now I am noting a reduction in SPAM experiments. This includes hiding a url, letter by letter in an HTML table. This seems to corolate witht the slowdown in other sectors of the American economy. Namely, the reduction in raw materials to Brazil, Russia, India and China. (Labeled, "the drop of the bric" by Jim Crammer of Mad Money on CNBC).
To this I am adding that my spam filters have jumped from 2-4% pass through to 1/2 of 1%. That is to say, usually I have 2-4% of all spam that makes it through the spam filter (given I get every payload marker). It appears that I am catching 99.4% now. I don't think my filters are better, or that I have all their domains, or payoff domains. I should also mention that the penny stock scams have stopped too.
I think in a few weeks we will know the answer.
Glossary
-tc
Thursday, October 2, 2008
Sunday, September 7, 2008
Where's the exe
M$ must have put out a working trojan trap because I have not seen any exe files in about week.
BTW, the .cn domains are back in full force. It seems they took off for the Olympics, then took an extra week off.
I should also note the spam being sent in an HTML table continutes.
tc
BTW, the .cn domains are back in full force. It seems they took off for the Olympics, then took an extra week off.
I should also note the spam being sent in an HTML table continutes.
tc
Saturday, August 16, 2008
Filter Working Well
Filtering using previous tags is up from approximately 1/2 to 3/4 being filtered out. Meaning either the spammers have a fixed number to deal with or some spammers are not sending right now. Notable the .cn domains have been lacking since the Olympics began.
tc
tc
Monday, August 11, 2008
creative non-sense
Today someone decide to hide the letter of their payload in a HTML table. I predicite failure on their end. I give it 3 weeks at most.
Another spammer decided the person receiving the spam should remove some stars, such as:
http://sa*****vemake.com Remove all the *****
I'm sure this will be equally successful.
tc
Another spammer decided the person receiving the spam should remove some stars, such as:
http://sa*****vemake.com Remove all the *****
I'm sure this will be equally successful.
tc
Tuesday, July 29, 2008
Swish (flash) stored on images sites really spam
This blew my mind.
img137.imageshack.us/img137/5418/30096901zt5.swf
tc
img137.imageshack.us/img137/5418/30096901zt5.swf
tc
Fake News on the horizon
Slight twist on an oldie. They are using the following domains to send out fake news leads like:
"The FBI can watch you on facebook"
Once you get there you can download the supposed storied. Of course, it is a trojan horse.
BestValueNews.com
CompanyNewsNetwork.com
FedNewsWorld.com
GoodNewsGames.com
Here are a few more
StockLowNews.com
ToplessDailyNews.com
ToplessNewsRadio.com
WapDailyNews.com
SmartNewsRadio.com
tc
"The FBI can watch you on facebook"
Once you get there you can download the supposed storied. Of course, it is a trojan horse.
BestValueNews.com
CompanyNewsNetwork.com
FedNewsWorld.com
GoodNewsGames.com
Here are a few more
StockLowNews.com
ToplessDailyNews.com
ToplessNewsRadio.com
WapDailyNews.com
SmartNewsRadio.com
tc
Subscribe to:
Posts (Atom)