The Lastest in Phish Bait

If you see the flowing message in your inbox, its appears they are giving up on the banks. Or just trying an old trick - again.

tc

---

We've enhanced web surfing process with new security measures to keep =
your online data and personal information safer.
All registered and new BBB consumers must register new software and =
update contact information until October 24, 2008.
Please read the following information carefully:

Register your BBB company certificate here>>>

---

Spam slower.

Spam continues to be slower.

Spam slowdown

I've noted a spam slowdown. At first, I noticed a decline in links to EXE files. Now I am noting a reduction in SPAM experiments. This includes hiding a url, letter by letter in an HTML table. This seems to corolate witht the slowdown in other sectors of the American economy. Namely, the reduction in raw materials to Brazil, Russia, India and China. (Labeled, "the drop of the bric" by Jim Crammer of Mad Money on CNBC).

To this I am adding that my spam filters have jumped from 2-4% pass through to 1/2 of 1%. That is to say, usually I have 2-4% of all spam that makes it through the spam filter (given I get every payload marker). It appears that I am catching 99.4% now. I don't think my filters are better, or that I have all their domains, or payoff domains. I should also mention that the penny stock scams have stopped too.

I think in a few weeks we will know the answer.

Glossary

-tc

Where's the exe

M$ must have put out a working trojan trap because I have not seen any exe files in about week.

BTW, the .cn domains are back in full force. It seems they took off for the Olympics, then took an extra week off.

I should also note the spam being sent in an HTML table continutes.

tc

Filter Working Well

Filtering using previous tags is up from approximately 1/2 to 3/4 being filtered out. Meaning either the spammers have a fixed number to deal with or some spammers are not sending right now. Notable the .cn domains have been lacking since the Olympics began.

tc

creative non-sense

Today someone decide to hide the letter of their payload in a HTML table. I predicite failure on their end. I give it 3 weeks at most.

Another spammer decided the person receiving the spam should remove some stars, such as:

http://sa*****vemake.com Remove all the *****

I'm sure this will be equally successful.

tc

Swish (flash) stored on images sites really spam

This blew my mind.

img137.imageshack.us/img137/5418/30096901zt5.swf

tc