> The spammer changes e-mail addres in every post.
>> The spammer changes e-mail addres in every post.
>
[quoted text clipped - 7 lines]
> If you torture the data long enough, eventually it will confess
> to anything.
Just d/l Spambrave. Has anyone used it? I have to delete all the current
spam and train Spambrave to only accept good posts. We'll see if it works.
This guy is persistant. Should be able to tell in a couple of days.
Jim
> He's not changing addresses.
Three last spam posts where signed with three different e-mail addresses:
"Elmo" <hungrily@ROOF.NET.TR>, <david@deep.ia.us>, "Abdul Al Sistani" <privately@league.com.hk>
> This is a robot similar to those used to get around
> spam blockers. The 'bot pulls random slices of text from various sources and
> uses the original owners' email addresses as his own. The key signature of this
> sort of 'bot is the fact that the subject lines are nonsense. The 'bot generates
> random strings of words for the subject line.
And which newsreader has advanced killfile recognizing "nonsense in the subject line"?
George Patterson - 11 Nov 2007 18:28 GMT
>> He's not changing addresses.
>
> Three last spam posts where signed with three different e-mail addresses:
> "Elmo" <hungrily@ROOF.NET.TR>, <david@deep.ia.us>, "Abdul Al Sistani"
> <privately@league.com.hk>
Yes, but the program is doing that. There's no need for the "poster" do actually
do anything. You're correct that each massage has a different return address,
but "he" isn't actually changing the address with each post. It's an automated
process.
> And which newsreader has advanced killfile recognizing "nonsense in the
> subject line"?
None that I know of. That's the entire point of the program. The original
purpose of the 'bot was to slip emails with spyware past readers' filters. If
you get curious about one of the mails and open it up, the spyware gets
activated. Usually the message gets sent by mail to several thousand people. The
return address gets changed each time it's sent. What this guy has done is to
generate multiple messages and have them sent here.
I've read that corporations have blocking programs that can stop this sort of
thing, but I don't know that to be true, much less know how it works. I do know
that some people have mail systems that simply block anything from strange email
addresses, but I don't know of any newsreader that has that feature.
George Patterson
If you torture the data long enough, eventually it will confess
to anything.
Pszemol - 11 Nov 2007 21:51 GMT
>>> He's not changing addresses.
>>
[quoted text clipped - 6 lines]
> but "he" isn't actually changing the address with each post. It's an automated
> process.
What difference does it make from my point of view?
Gill Passman - 11 Nov 2007 22:18 GMT
>>>> He's not changing addresses.
>>>
[quoted text clipped - 9 lines]
>
> What difference does it make from my point of view?
On most of these posts the poster opted for them to be removed after a
very short time scale. I basically, unsubcribed, and then resubsribed to
the group - the trash was gone :-)....I had to re-read the interesting
stuff though but that wasn't too much of a trauma - lol
Gill