Tag Info

New answers tagged

2

Lately, it has been very common for e-mails to be spoofed as if they are from someone on your contact list or on your Facebook friends. These often don't require actually compromising the account and are instead simply faked and sent. The best way to determine if this is the case is to look at the header of one of the e-mails and see if it actually ...


2

They may be going off templates like this: https://gist.github.com/shanselman/5422230 , which was recently accidentally posted to Scott Hanselman's site: http://www.hanselman.com/blog/ExposedABlogCommentSpammersSourceTemplate.aspx As others have mentioned, all that needs to be done is to write a script to pull a word at random out of the bracketed lists.


10

My company used to do "spinning", which as one of the answers above mentioned is programatically doing thesaurus search and replaces on the text. However, we would do it in multiple, complex layers. We actually employed real, American writers to write the original copy. Those original writers would mark up their own document using a special syntax that we ...


0

It can be said simply that you must be aware of SEO(Search Engine Optimization) IT has 2 types of techniques in major 1) Black Hat and 2) White Hat White hat do the genuine way or authentic work. but where black hat comes your problem starts, what they do is they have created number of user name , password, or list of open blogs... they keep on posting ...


5

Maybe this won't answer the OP's question but those spams are not meant to make anybody buy anything. The point is to create the maximum number of comments with links to particular pages or sites that spammers want to improve their PageRank. Those sites are where the real work of seducing potential buyers (or hacking computers of potential victims, or ...


19

The language may have a little to do with a sig like TidalWave was talking about. A little harmless spamdexing. I've been getting a few of the first example on my blog. While it looks harmless, they're actually spamdexing (a little bit of "black hat seo") by trying to associate their user account (and website links by extension) with the keywords in the ...


2

Quite often blogspammers use content spinners. They replace words with synonyms, which should work in theory, but in reality it makes the comment look like written by a 4 year old; or someone who does not have english as first language. Most content spinners share a common syntax (example from Eric Lippert's answer): I can't ...


12

I don't know if in your case the text you reported was the entire comment (what would then be its purpose, either as a genuine comment or as spam/scam?). In case it was not – and when the spam needs to work as a prelude to future interaction – then writing it in poor english might be done on purpose, as a "check" for a victim that is dumb enough not to ...


6

In addition to the fine answers posted above there is a strong sampling bias to your question. You only recognize poorly crafted spam blog posts as blog spam. You never recognize the really well crafted blog spam as blog spam. Hence it seems that all blog spam is poorly crafted. AmIRight?


105

The spammers are automatically generating new comments by taking existing comments and running them through a thesaurus program that replaces words with synonyms or related parts of speech. The result is a sentence which makes sense, but has word choices that no native speaker would ever make: Where else may I am getting ... is clearly not something a ...


7

It is probably a combination of the two. If they use language that doesn't properly make grammatical sense, there is more likelihood someone might misinterpret it as actual feedback on a post since they'll try to fill in the blanks in a way that makes sense. Ultimately most of this kind of spam is trying to spread links around the web to try and impact ...


4

SPF records stop one particular type of spam, but only one type. As the owner of example.com I know what the IP addresses of my mail servers are. I can publish a DNS record that lasts these IP addresses and a policy for other mail servers to follow when receiving mail that claims to be from my domain example.com. That's the type it stops. It stops ...


0

I'd check for the use of multiple encodings in the same word (or sentence). That would be a dead ringer for this kind of thing. Otherwise, something like this could help you - unfortunately it's only a partial table, and you'd have to use it in reverse. c3a0 means U+00E0 here. a: c3a0,c3a1,c3a2,c3a3,c3a4,c3a5,c3a6,c481,c483,c485, c: ...


4

I would add to my spam classification algorithm something that detects multiple encodings in the same word/sentence. E.g., lαѕт having a Latin l, greek/coptic alpha, cyrillic dze, cyrillic te seems very suspicious. A very quick and dirty thing in python could be done using unicodedata. That is >>> unicode_str = u"""мy вυddy'ѕ мoм мαĸeѕ $74/нoυr ...



Top 50 recent answers are included