New(?)Spam Substitution Technique
-
Just recently aware that the spammer uses new substitution technique for the spam. Example:
мʏ ғʀιɛɴɖ'ѕ ѕιѕтɛʀ-ιɴ-ʟαա мαĸɛѕ $80 нօυʀʟʏ օɴ тнɛ ƈօмքυтɛʀ. ѕнɛ нαѕ вɛɛɴ օυт օғ աօʀĸ ғօʀ 9 мօɴтнѕ вυт ʟαѕт мօɴтн нɛʀ քαʏмɛɴт աαѕ $1з978 ʝυѕт աօʀĸιɴɢ օɴ тнɛ ƈօмքυтɛʀ ғօʀ α ғɛա нօυʀѕ. աнʏ ɴօт ƈнɛƈĸ нɛʀɛ
No filter can handle non-ascii substitution yet? As far as I know, usually they use some kind of l33t speak.
Surely it's just a case of marking anything that has a very low number of characters in the A_Z range as potential spam ?
Christian Graus My new article series is all about SQL !!!
-
Surely it's just a case of marking anything that has a very low number of characters in the A_Z range as potential spam ?
Christian Graus My new article series is all about SQL !!!
-
Should be fine if your are expecting english-speaking forum, but how to handle in the international forum (e.g.: japanese, chinese, hindi, etc..)
Fair call. There's ways around that, but it's not as simple as I thought.
Christian Graus My new article series is all about SQL !!!
-
Just recently aware that the spammer uses new substitution technique for the spam. Example:
мʏ ғʀιɛɴɖ'ѕ ѕιѕтɛʀ-ιɴ-ʟαա мαĸɛѕ $80 нօυʀʟʏ օɴ тнɛ ƈօмքυтɛʀ. ѕнɛ нαѕ вɛɛɴ օυт օғ աօʀĸ ғօʀ 9 мօɴтнѕ вυт ʟαѕт мօɴтн нɛʀ քαʏмɛɴт աαѕ $1з978 ʝυѕт աօʀĸιɴɢ օɴ тнɛ ƈօмքυтɛʀ ғօʀ α ғɛա нօυʀѕ. աнʏ ɴօт ƈнɛƈĸ нɛʀɛ
No filter can handle non-ascii substitution yet? As far as I know, usually they use some kind of l33t speak.
-
I'm pretty sure my spam filter would pick that up and ditch it. Come to think of it, the best spam is well worded targeted advertisements, those get through my filter all the time. What makes them spam is the lack of an "unsubscribe" link.
Beware the unsubscribe link - that can just tell them that the email address is being monitored by a human - upping the value of your email address!
MVVM # - I did it My Way ___________________________________________ Man, you're a god. - walterhevedeich 26/05/2011 .\\axxx (That's an 'M')
-
Beware the unsubscribe link - that can just tell them that the email address is being monitored by a human - upping the value of your email address!
MVVM # - I did it My Way ___________________________________________ Man, you're a god. - walterhevedeich 26/05/2011 .\\axxx (That's an 'M')
I think this is mostly a myth. I've set out to get myself off a ton of mailing lists, and the unsubscribe links nearly always work. I also believe they are legally required to exist, and work.
Christian Graus My new article series is all about SQL !!!
-
I think this is mostly a myth. I've set out to get myself off a ton of mailing lists, and the unsubscribe links nearly always work. I also believe they are legally required to exist, and work.
Christian Graus My new article series is all about SQL !!!
It really depends on whether the email is from someone where you have previously subscribed (in which case it is almost certainly legitimate) or just a random spam email. If 'random' spam, then the only reason for putting an unsubscribe is for them to get you to click a link. And it's unlikely that it's for your benefit ;)
MVVM # - I did it My Way ___________________________________________ Man, you're a god. - walterhevedeich 26/05/2011 .\\axxx (That's an 'M')
-
It really depends on whether the email is from someone where you have previously subscribed (in which case it is almost certainly legitimate) or just a random spam email. If 'random' spam, then the only reason for putting an unsubscribe is for them to get you to click a link. And it's unlikely that it's for your benefit ;)
MVVM # - I did it My Way ___________________________________________ Man, you're a god. - walterhevedeich 26/05/2011 .\\axxx (That's an 'M')
Yeah, I guess that is true. gmail's spam filter is excellent, anything I sent, I (somewhat) signed up for.
Christian Graus My new article series is all about SQL !!!
-
Yeah, I guess that is true. gmail's spam filter is excellent, anything I sent, I (somewhat) signed up for.
Christian Graus My new article series is all about SQL !!!
Christian Graus wrote:
gmail's spam filter is excellent
They do pretty well! I guess handling the amount of mail they do, they have the advantage of being able to see that multiple emails are being sent to many subscribers, and mark it as suspicious - especially as more and more users mark it as spam. A good reason for the tinfoil hat brigade to stop worrying about them 'reading' your email!
MVVM # - I did it My Way ___________________________________________ Man, you're a god. - walterhevedeich 26/05/2011 .\\axxx (That's an 'M')
-
Christian Graus wrote:
gmail's spam filter is excellent
They do pretty well! I guess handling the amount of mail they do, they have the advantage of being able to see that multiple emails are being sent to many subscribers, and mark it as suspicious - especially as more and more users mark it as spam. A good reason for the tinfoil hat brigade to stop worrying about them 'reading' your email!
MVVM # - I did it My Way ___________________________________________ Man, you're a god. - walterhevedeich 26/05/2011 .\\axxx (That's an 'M')
Yeah, I've had people be shocked, not thrilled, when they google device shows them that they have a flight today, and the gate number. Yes, their code read your mail. No, I don't see how that can harm you.
Christian Graus My new article series is all about SQL !!!
-
Just recently aware that the spammer uses new substitution technique for the spam. Example:
мʏ ғʀιɛɴɖ'ѕ ѕιѕтɛʀ-ιɴ-ʟαա мαĸɛѕ $80 нօυʀʟʏ օɴ тнɛ ƈօмքυтɛʀ. ѕнɛ нαѕ вɛɛɴ օυт օғ աօʀĸ ғօʀ 9 мօɴтнѕ вυт ʟαѕт мօɴтн нɛʀ քαʏмɛɴт աαѕ $1з978 ʝυѕт աօʀĸιɴɢ օɴ тнɛ ƈօмքυтɛʀ ғօʀ α ғɛա нօυʀѕ. աнʏ ɴօт ƈнɛƈĸ нɛʀɛ
No filter can handle non-ascii substitution yet? As far as I know, usually they use some kind of l33t speak.
My impression is that spam filters use by companies like google don't just work on the content but also on the number of similar emails sent out together with whether the name of the recipient is in the email.
“That which can be asserted without evidence, can be dismissed without evidence.”
― Christopher Hitchens
-
Should be fine if your are expecting english-speaking forum, but how to handle in the international forum (e.g.: japanese, chinese, hindi, etc..)
This "encryption" is going across many scripts within a word boundary. So giving the filter a criterion like that, only little training should be needed.