alpines
[Top] [All Lists]

RE: [OT] New spamming technique.

To: JGross@econolite.com, Eddie.Donovan@PWGSC.GC.CA,
Subject: RE: [OT] New spamming technique.
From: "Kevin McLemore" <kmclemore@hotmail.com>
Date: Mon, 13 Jan 2003 18:57:35 -0500
Agreed, Jarrid, but I also look to see who the sender is.  If I don't do 
business with or recognise the sender I delete it without looking.  Yes, I 
know that the address name can be spoofed too, but I even delete the cr*p 
from Hotmail.  My actual ISP is a private one, so if it's not directly from 
them I delete it right off.  (And I will *NEVER* use AOL!  Ugh.)

You're right, though, in that as time goes on the ways these morons try to 
get into your PC just keep getting more and more devious.  Sigh.
Regards,
Kevin

----Original Message Follows----
From: Jarrid Gross <JGross@econolite.com>
To: Kevin McLemore <kmclemore@hotmail.com>, Eddie.Donovan@PWGSC.GC.CA, 
tjhiggin@mapapp1.iss.ingr.com, alpines@autox.team.net
Subject: RE: [OT] New spamming technique.
Date: Mon, 13 Jan 2003 08:29:11 -0800

Kevin,

But would you ignore an email with a title that says"
"Changes to your email account"

Your parcitice sounds fine, but I think this one would still get
you.  Since I originally started this thread, I have received 2 more
from other sources with equally compelling titles.

Your virus checker wont catch this because it has no payload.
It gives confirmation that your email address is valid and that
you read your email, and also (which scares me even more) provides
your IP address to the server that is logging all the hits from these
emails.  An even less scrupulous scammer could use your IP address
to find a vulnerability in your computer.

I have seen the future and it is getting downright scary.

Jarrid.

-----Original Message-----
From: Kevin McLemore [mailto:kmclemore@hotmail.com]
Sent: Saturday, January 11, 2003 6:26 AM
To: Eddie.Donovan@PWGSC.GC.CA; JGross@econolite.com;
tjhiggin@mapapp1.iss.ingr.com; alpines@autox.team.net
Subject: RE: [OT] New spamming technique.


Yes, Eddie, I do the same thing.. delete everything that seems suspicious or

like spam before I even open them!  This keeps any attached VBS scripts or
other 'nasties' from running and delivering malicious code to my box.

-Kevin McLemore

----Original Message Follows----
From: "Eddie Donovan" <Eddie.Donovan@PWGSC.GC.CA>
Reply-To: "Eddie Donovan" <Eddie.Donovan@PWGSC.GC.CA>
To: "Jarrid Gross" <JGross@econolite.com>,   "T.J. Higgins"
<tjhiggin@mapapp1.iss.ingr.com>,   "Alpines" <alpines@autox.team.net>
Subject: RE: [OT] New spamming technique.
Date: Thu, 9 Jan 2003 22:58:55 -0500

Like all of I get the usual assortment of spam, 10 to 15 a day. Several
months ago I started the habit of looking in the list of new mail and before

opening, deleting anything that originated from someone I didn't know or
whose subject line made it obvious enough. Then I'd go back and begin to
read what remained. I'm certain I've deleted a couple from list members but
by and large I read enough from the group to be familiar with most of your
e-mail "handles". With this and the usual assortment of anti-virus, etc
software I haven't yet been infected with anything. I probably still receive

the odd one but not even opening the e-mail (or having the preview option
enabled which opens it them)keeps me a little safer and up and running
longer.

On a better note! I just came back from the paint shop and my 1961 Series II

has six new coats of colour (39 from Jan's paint chips) and six new coats of

clear on a frame-off restoration of a rust free body! They start buffing it
tomorrow! Took some good pictures with my wife's new digital camera that I
wish I could send to you all as attachments but they'd be stripped off
before getting to you. It's so great after a couple of years to see my
Alpine with a beautiful new coat on. 8~)

Eddie Donovan (AlpineII)
Carlsbad Springs, Ontario
Series II, 1961 - B9108405 LRX - Finished the paint shop and starting to
re-assemble.
Series II, 1961 - B9104430 ODLR - Future project
SAOCA Member #20

-----Original Message-----
From: Jarrid Gross [mailto:JGross@econolite.com]
Sent: Thursday, January 09, 2003 3:01 PM
To: T.J. Higgins; Alpines
Subject: [OT] New spamming technique.


Piners,

I think Ive uncovered a now way for spammers to see if they have a live
email address.

The email has a clever subject line that almost anyone will click on,
"Changes to your email account"

The email itself is almost jibberish, not even spammy, but it has hidden
HTML in it that refers to a website, and the body of the HTML has your email
address embedded in it that will get sent in an HTML dialag when you view
the email.


here is the HTML if anyone is interested, I substituted
"your_email@your_domain.com" for my
email address.

<body><img
src="http://www.listo01.com/FMPro?-db=tr.fp5&-format=tr.htm&e=your_email@you
r_domain.com
&b=tue07&-new" border="0" width="2" height="1"></body></html>

As you can see, the spammer can verify automatically if he has a live
address just be sending the
email and then watching the HTML traffic on his web server.


I suspect my spam load is about to skyrocket.


Jarrid Gross


_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 2 months FREE*


_________________________________________________________________
MSN 8: advanced junk mail protection and 2 months FREE*. 

<Prev in Thread] Current Thread [Next in Thread>