Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.

learn more… | top users | synonyms

161
votes
3answers
12k views

What is the purpose of “gibberish” comments posted to my blog?

Fairly frequently, the contact form on my blog gets comments that look similar to this (each field represents a text box users can enter into the HTML form on the blog): Name: 'ceguvzori' Email: ...
89
votes
10answers
8k views

Why is blog spam always written so badly?

Some spam messages fresh from my Wordpress filter: Asking questions are in fact pleasant thing if you are not understanding something totally, except this article gives good understanding yet. ...
56
votes
4answers
4k views

Is using 'dot' and 'at' in email addresses in public text still useful?

When entering your email address publicly, a practice is to replace . with text dot and @ with text at. I assume that the reasoning is that this way automatic email-collector robots won't match your ...
48
votes
4answers
2k views

What is the point of gibberish spam

I fairly often happen across forums spammed with messages such as: Arugula (Eruca sativa) is an quarterly green, pretended or roquette. It's been Traditional times, overclever 20 flat has be ...
34
votes
2answers
10k views

What malicious things can happen when clicking on links in email?

I've received a spam from one of my friends (well I'm sure he didn't send it). so there's this link, and i'd thought what exactly would be the implications of clicking the link (i've not clicked it ...
28
votes
10answers
6k views

How to explain to a customer that spamfilters don't catch everything

I used to work in a small office which provided basic desktop support for users. One day I had to answer a call from a very angry customer and he asked for my boss. He wanted to know how could one ...
25
votes
2answers
4k views

What is a “spam seed”?

Here I found a new terminology first time: Looks like a spam seed is a post, which "is designed to allow spammers to post questions so it looks legitimate". What means this exactly? Maybe it ...
21
votes
4answers
2k views

What are spambots doing with unintelligible login attempts?

After constantly being under attack in phpBB, I created a new forum by hand, which successfully prevents spam bots from registering, and I get a report for every failed login attempt, telling me the ...
19
votes
5answers
9k views

Is this “Domain Registration Service” email a scam?

I received an email to the email address listed on our website (it's a generic info@ourcompany.com to help "weed out" spam, whereas each employee has something like andreas@ourcompany.com to which I ...
19
votes
3answers
3k views

How does Bayesian poisoning work?

This answer mentions Bayesian poisoning in passing and I've read the wikipedia page but don't feel I've fully grasped it. The first case, where a spammer sends a spam with a payload (link, malicious ...
18
votes
4answers
3k views

Would 'spam' mail really avoid eavesdropping?

spammimic.com offers a service that 'encrypts' your mail as 'spam', the rationale being that all mail services automatically filter out spam, and so if you're wanting to communicate with someone ...
13
votes
6answers
5k views

How do I safely inspect a suspicious email attachment?

I received a pretty blatantly spammy email to my Gmail account. I'm not really sure how it made it through the spam filters, since it has all of the telltale signs. The FROM field is spoofed as ...
13
votes
4answers
610 views

what to do after suspected intrusion on hobby webserver

I maintain a server to host my files and a number of websites for hobbies and friends. I just noticed that the site summary being returned in google for one of my domains were all porn related ...
11
votes
12answers
6k views

Is there a true alternative to using CAPTCHA images?

Security is about balancing costs and risks, nothing is impossible to beat, specially not typical CAPTCHA implementations, but they do add something no other system seems to offer. I've been reading ...
11
votes
2answers
1k views

Caller ID Spoof and Text Spams – How do they work?

A lot of people will have at some point received a spam text offering some sort of help via a debt settlement order, or help claiming for an accident that they have never had. I’ve noticed these are ...
10
votes
1answer
939 views

Is there a spam storm? [closed]

I realize this is a bit off-topic, but don't know where else to go to ask... I've gotten an enormous amount of spam in the past 24 hours (hundreds), even after some relatively good spam filters. ...
10
votes
3answers
337 views

What are common/official methods of reporting spam/phishing/nasty-grams to organizations?

A user of mine just received a phishing email claiming to be the IRS. What methods of reporting are available, and what should be included?
9
votes
5answers
10k views

How and why do people spam my website form?

In have a web form on my website, and someone keeps sending annoying spam through it. I know Captcha can block this, but why do people spam my site - what's their benefit? How do they access my web ...
9
votes
3answers
1k views

Hashcash, is this really used?

I just heard about this term, is it really used? The concept does not seem new, is it used and/or implemented in current technologies?
9
votes
2answers
19k views

How was my Yahoo email account used to send spams

My yahoo email account was sending spams at about 6:42pm EDT (the spams show 3:42pm PDT) yesterday. I realized it by receiving several "Failure Notice" emails for Yahoo was unable to deliver the spam ...
8
votes
4answers
306 views

Best practice for informing a website they've been compromised?

I've received a spam email that claims to be invoicing me for some service in New Jersey, USA with whom I've not had any dealings. The email includes a link to a zip file that is hosted on a greek ...
8
votes
1answer
454 views

Cheap to validate yet expensive to compute hashing algorithm

I am looking for a hashing algorithm somewhat like bcrypt, except that I would like validation to be extremely cheap. As an anti-spam measure I would like to require my clients spend say, half a ...
7
votes
4answers
3k views

What does this malicious PHP script do? [closed]

Somebody hacked my site and uploaded this script (template46.php) to my webroot and its content is: <?php $vIIJ30Y = Array('1'=>'F', '0'=>'j', '3'=>'s', '2'=>'l', '5'=>'M', ...
7
votes
4answers
383 views

Next steps after webmail account was compromised

John Doe told me the following story: I got a mail from a good friend. It just contained a single link. That seemed odd but I didn't think a lot about it. After clicking on the link, the web site ...
7
votes
1answer
1k views

How do I stop attack on my email id from hackers?

We have an email id, info@<ourdomain>.com This email id is being hacked frequently and mails are sent from this email id, Following is the example of one such email. From: ...
7
votes
3answers
5k views

Finding spam sending scripts?

What are the tips for finding email spam sending scripts? I ask because usually I hit a wall in shared hosting environments, so I ask this question as a way to get some insight from others. What I ...
6
votes
5answers
751 views

How do spammers verify the validity of a huge amount of email addresses?

I noticed that there is an email address validation method, that is to telnet to a email MX server and send rcpt command to the server. But for this method, the MX server may abort connection after ...
6
votes
2answers
1k views

spam with my own domain

At my work we have a very tricky issue with spam. We use postfix, and recently began to receive several spams mail with our own domain. This is obviously very prejudicial for us, because many ...
6
votes
4answers
8k views

Can most mail from *.ru be considered spam?

Is it safe to assume that most, if not all, emails from a *.ru domain may be considered spam? From a log of 30000 emails from *.ru, its all been spam (over two months).
6
votes
3answers
837 views

Why does a spam sms contain a link to an email address?

A colleague of mine just received a (spam) sms with this message: Congratulations! Your mobile have won $1,000,000,00 Pounds with Draw# 294 64/2013. For more info & claims, contact our ...
6
votes
2answers
3k views

Will reporting phishing emails cause problems for the victim?

On GMail, I've received a phishing email from someone I know, and the email has been sent to other people the victim knows. One of the emails is claiming to be from their GMail address, while the ...
6
votes
3answers
196 views

SPAM Email Analysis

What are the steps you would follow in order to identify in an email is a SPAM/SCAM/Phishing attempt? The reason I am asking this question is that sometimes very well crafted junk emails manage to ...
6
votes
2answers
91 views

What information should I provide to a website or organization when notifying them that their domain may be sending out spam?

Over the past few days, I've received several spam emails coming from the addresses of a school district. I don't know much about email message headers, but since they contain numerous references like ...
6
votes
2answers
409 views

Statistics on purposes of viruses/malware

Are there any resources that analyze the purpose or goal or the major viruses/malware out in the wild today? For example, what percentage are used to construct botnets (for DDoS or something else)? ...
6
votes
1answer
205 views

random-string spam probe messages?

For years, we've been receiving messages through our contact form in the following format: name: vlsyekcz email: jjthiy@toaagq.com subject: BdsQiWYlYo body: 2BLgIr <a ...
6
votes
1answer
3k views

How to create your own RBL DNS Blacklist to prevent spam

I am getting sick of reporting the same old chinese emails to Spamcop now and would like to make my own small RBL list that I can easily add blocks of IP's to. I have a spare PC and static IP address ...
5
votes
6answers
352 views

Spam fighting idea

I have this crazy idea that spam e-mail would not be worth the time of the senders. This is how it's going to work. Someone sets up a reputation-based site, much like stackexchange sites, where ...
5
votes
6answers
4k views

How did the spam email sender get my name?

Some time ago I bought something online from a reputable website. I paid through my credit card and everything worked fine. The thing which is important to note is that the name used on the credit ...
5
votes
3answers
2k views

Delivery Failure Notification spam protection?

My domain (example.com) has recently been targeted by spammers who are sending email (somewhere) but forging the sender as random-name@example.com. I have been getting flooded by delivery failure ...
5
votes
3answers
637 views

How did the spammers get this address?

A few months ago I configured a test mail server on Amazon AWS, all legit. I used a new address to my catchall-domain (something similar to, but not exactly, ...
5
votes
1answer
4k views

Facebook page receiving improbable amount of likes from unknown users

A bit of an odd problem, but I'm not totally sure where to post this. I am an administrator for a facebook page that suddenly began receiving hundreds of likes in the past few days. This trend began ...
5
votes
1answer
128 views

How long can I store personal information on unconfirmed subscriptions?

I have a monthly newsletter. In my subscribe form I use a double opt-in method: The visitor subscribes. I send him a confirmation email. If I receive a reply, I add him/her to my system. In the ...
5
votes
1answer
207 views

spam: several secret inboxes targeted at once. risk or coincidence?

I have a domain that is only used by me, with several inboxes in the format aep-x-company@domain , where i replace 'company' with wherever i sign up. This way i can detect when someone sells email ...
5
votes
4answers
5k views

Spammers bypassing the reCaptcha

I'm using recaptcha on a very simple forum registration page. The script first of all checks if the recaptcha code is valid, then it process. As soon i did put the website live, it got lots of spam ...
4
votes
1answer
503 views

How to catch a SMS spammer who is using google voice to spam me

How do I catch a SMS spammer who is using google voice to spam me? I have the google voice number and 2 of their burner emails with gmail. How do I gather enough information to inform the ...
4
votes
3answers
1k views

Security concerns with malicious NFC tags?

I was reading this article from Life Hacker, How to Automate Your Phone for Every Room in the House with NFC Tags. The idea is to place NFC tags around your house, car, etc. so that you phone will ...
4
votes
2answers
508 views

Is there a dictionary of visibly similar Unicode characters for Spam processing?

I have spam that looks like this: мy вυddy'ѕ мoм мαĸeѕ $74/нoυr oɴ тнe lαpтop. ѕнe нαѕ вeeɴ lαιd oғғ ғor ѕeveɴ мoɴтнѕ вυт lαѕт мoɴтн нer pαy cнecĸ wαѕ $19420 jυѕт worĸιɴɢ oɴ тнe lαpтop ғor α ...
4
votes
1answer
173 views

Suspecious js file sent as email attachment

I received a js file with following code in my spam folder but I decided to take a look into the file. Do anybody of you know what does this code might do? var evl='';function nr() { evl = '}; ' + ...
4
votes
2answers
169 views

Human or Bot: Behind the Scene Checks vs CAPTCHA

I'm working on a web app at the moment where we’re trying to remove any user friction and excess steps from our user creation page. To avoid computer bots completely spamming our app we need to have a ...
4
votes
1answer
120 views

Is access to the caller API in mobile phones a real security threat?

From time-to-time I receive "Unknown" caller on my mobile phone. I do not want to answer those calls as I do not trust the identity of a caller. I feel safer if I can see caller name or at least ...