After a major slow down in spam, today marks the second day of spam volume picking up. Notabley, there is very few tricks in the incoming mail. There is a lot of domain dumping. I have noted as many as 8 domains in a single email, but usually 3 to 4. Alot of .com and .cn continue. ".es" which was heavy for the last two weeks is now rolling back. Similarly, ".eu" which as heavy for two weeks is now almost unseen.
tc
Wednesday, December 3, 2008
Wednesday, October 22, 2008
The Lastest in Phish Bait
If you see the flowing message in your inbox, its appears they are giving up on the banks. Or just trying an old trick - again.
tc
We've enhanced web surfing process with new security measures to keep =
your online data and personal information safer.
All registered and new BBB consumers must register new software and =
update contact information until October 24, 2008.
Please read the following information carefully:
Register your BBB company certificate here>>>
tc
We've enhanced web surfing process with new security measures to keep =
your online data and personal information safer.
All registered and new BBB consumers must register new software and =
update contact information until October 24, 2008.
Please read the following information carefully:
Register your BBB company certificate here>>>
Wednesday, October 15, 2008
Thursday, October 2, 2008
Spam slowdown
I've noted a spam slowdown. At first, I noticed a decline in links to EXE files. Now I am noting a reduction in SPAM experiments. This includes hiding a url, letter by letter in an HTML table. This seems to corolate witht the slowdown in other sectors of the American economy. Namely, the reduction in raw materials to Brazil, Russia, India and China. (Labeled, "the drop of the bric" by Jim Crammer of Mad Money on CNBC).
To this I am adding that my spam filters have jumped from 2-4% pass through to 1/2 of 1%. That is to say, usually I have 2-4% of all spam that makes it through the spam filter (given I get every payload marker). It appears that I am catching 99.4% now. I don't think my filters are better, or that I have all their domains, or payoff domains. I should also mention that the penny stock scams have stopped too.
I think in a few weeks we will know the answer.
Glossary
-tc
To this I am adding that my spam filters have jumped from 2-4% pass through to 1/2 of 1%. That is to say, usually I have 2-4% of all spam that makes it through the spam filter (given I get every payload marker). It appears that I am catching 99.4% now. I don't think my filters are better, or that I have all their domains, or payoff domains. I should also mention that the penny stock scams have stopped too.
I think in a few weeks we will know the answer.
Glossary
-tc
Sunday, September 7, 2008
Where's the exe
M$ must have put out a working trojan trap because I have not seen any exe files in about week.
BTW, the .cn domains are back in full force. It seems they took off for the Olympics, then took an extra week off.
I should also note the spam being sent in an HTML table continutes.
tc
BTW, the .cn domains are back in full force. It seems they took off for the Olympics, then took an extra week off.
I should also note the spam being sent in an HTML table continutes.
tc
Saturday, August 16, 2008
Filter Working Well
Filtering using previous tags is up from approximately 1/2 to 3/4 being filtered out. Meaning either the spammers have a fixed number to deal with or some spammers are not sending right now. Notable the .cn domains have been lacking since the Olympics began.
tc
tc
Monday, August 11, 2008
creative non-sense
Today someone decide to hide the letter of their payload in a HTML table. I predicite failure on their end. I give it 3 weeks at most.
Another spammer decided the person receiving the spam should remove some stars, such as:
http://sa*****vemake.com Remove all the *****
I'm sure this will be equally successful.
tc
Another spammer decided the person receiving the spam should remove some stars, such as:
http://sa*****vemake.com Remove all the *****
I'm sure this will be equally successful.
tc
Subscribe to:
Posts (Atom)