We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [spam]

Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.

Filter by
Sorted by
Tagged with
64
votes
4answers
6k views

What is the point of gibberish spam

I fairly often happen across forums spammed with messages such as: Arugula (Eruca sativa) is an quarterly green, pretended or roquette. It's been Traditional times, overclever 20 flat has be ...
43
votes
2answers
20k views

What malicious things can happen when clicking on links in email?

I've received a spam from one of my friends (well I'm sure he didn't send it). so there's this link, and i'd thought what exactly would be the implications of clicking the link (i've not clicked it ...
30
votes
3answers
18k views

How are spammers using LinkedIn “http://linkedin.com/slink?code=…” URLs?

I was sent this kind of link from presumably compromised Skype account, via a skype message (do not click unless you have a sandbox or something to protect you): https://www.linkedin.com/slink?code=...
86
votes
4answers
13k views

Is using 'dot' and 'at' in email addresses in public text still useful?

When entering your email address publicly, a practice is to replace . with text dot and @ with text at. I assume that the reasoning is that this way automatic email-collector robots won't match your ...
37
votes
6answers
45k views

How do I safely inspect a suspicious email attachment?

I received a pretty blatantly spammy email to my Gmail account. Attached to the email is a supposed HTML file. My first hunch was that it was probably one of the following: A nasty executable file ...
25
votes
3answers
4k views

How does Bayesian poisoning work?

This answer mentions Bayesian poisoning in passing and I've read the wikipedia page but don't feel I've fully grasped it. The first case, where a spammer sends a spam with a payload (link, malicious ...
18
votes
12answers
10k views

Is there a true alternative to using CAPTCHA images?

Security is about balancing costs and risks, nothing is impossible to beat, specially not typical CAPTCHA implementations, but they do add something no other system seems to offer. I've been reading ...
12
votes
3answers
629 views

What are common/official methods of reporting spam/phishing/nasty-grams to organizations?

A user of mine just received a phishing email claiming to be the IRS. What methods of reporting are available, and what should be included?
7
votes
4answers
21k views

What does this malicious PHP script do? [closed]

Somebody hacked my site and uploaded this script (template46.php) to my webroot and its content is: <?php $vIIJ30Y = Array('1'=>'F', '0'=>'j', '3'=>'s', '2'=>'l', '5'=>'M', '4'=>'...
182
votes
3answers
15k views

What is the purpose of “gibberish” comments posted to my blog?

Fairly frequently, the contact form on my blog gets comments that look similar to this (each field represents a text box users can enter into the HTML form on the blog): Name: 'ceguvzori' Email: '...
16
votes
4answers
828 views

what to do after suspected intrusion on hobby webserver

I maintain a server to host my files and a number of websites for hobbies and friends. I just noticed that the site summary being returned in google for one of my domains were all porn related (...
4
votes
1answer
406 views

Why set up DMARC for SPF if it's already set up for DKIM?

I have SPF and DKIM. I'm planning on adding DMARC to tell receivers to expect SPF and/or DKIM. I've read that it's best to set DMARC up with both SPF and DKIM, but I don't understand exactly when ...
6
votes
2answers
2k views

spam with my own domain

At my work we have a very tricky issue with spam. We use postfix, and recently began to receive several spams mail with our own domain. This is obviously very prejudicial for us, because many ...
5
votes
1answer
6k views

Databases with spam, phishing email examples [duplicate]

I'm working on a little project trying to see if I can predict the likelihood that an email is in fact a security risk (phishing, spam, social engineering, etc). I order to do this I need to have a ...
93
votes
10answers
18k views

Unsubscribe safely

I have heard that is better to never click to any link in an email. Is it a bad idea to click to a unsubscribe link? What is the best way to unsubscribe to undesired mails?
21
votes
4answers
3k views

Would 'spam' mail really avoid eavesdropping?

spammimic.com offers a service that 'encrypts' your mail as 'spam', the rationale being that all mail services automatically filter out spam, and so if you're wanting to communicate with someone ...
6
votes
2answers
4k views

How can we protect signup APIs from brute force registration?

This is a general question but its prompted by a fairly open API I have for a file storage service that needs to have its front door better locked down. We have an API like POST '/signup' that just ...
31
votes
6answers
43k views

Is this “Domain Registration Service” email a scam?

I received an email to the email address listed on our website (it's a generic info@ourcompany.com to help "weed out" spam, whereas each employee has something like andreas@ourcompany.com to which I ...
6
votes
3answers
3k views

What is this Russian calendar reminder that popped up?

I woke up this morning and saw a calendar reminder that I definitely did not put there, written in Russian. It would be super helpful if anyone knows what the text means, but I figured opening the ...
5
votes
1answer
368 views

spam: several secret inboxes targeted at once. risk or coincidence?

I have a domain that is only used by me, with several inboxes in the format aep-x-company@domain , where i replace 'company' with wherever i sign up. This way i can detect when someone sells email ...
3
votes
2answers
5k views

What risks do I have now that I accidentaly opened a suspicious URL send to me by Skype?

The following URL was sent to me by a trusted Skype contact (from my university): WARNING - DO NOT CLICK IF YOU DON'T KNOW WHAT YOU'RE DOING http://bit.ly/28PPw3V#dahubas=my_skype_id I clicked on ...
1
vote
5answers
4k views

Good ways to prevent spammers from registering [duplicate]

Possible Duplicate: Is there a true alternative to using CAPTCHA images? Since everyone hates captchas what are good alternatives? I'm looking to prevent the automated creation of accounts on a ...
1
vote
4answers
689 views

How can these spam emails be accessing email accounts on respected domains?

Today I received a spam email from juliew@mchs.org.au requesting to contact Harry Black about a charity project. His email address is harryblack2013@rogers.com. After I had done so and fallen for the ...
68
votes
2answers
11k views

What is the purpose of these weird non-spam emails?

A mail made it through the spam filter and i wonder what the purpose is. It is not spam. Tracking? But how? Who? and why? In the source code there are this weird passages like ... =EA=85=9F =EA=8F=...
17
votes
5answers
4k views

Hashcash, is this really used?

I just heard about this term, is it really used? The concept does not seem new, is it used and/or implemented in current technologies?
12
votes
3answers
2k views

Email unsubscribe handling security

There is another question with similar title: Unsubscribe safely however my question addresses completely another issue. I am trying to set up a notification system in the website, that will send ...
16
votes
2answers
158k views

Spam that comes from names in my address book, but not their email addresses

I've recently received two spam messages that show a possibly worrying degree of knowledge about my contacts, and I'm wondering how concerned I should be. Specifically, the names -- but not the email ...
9
votes
3answers
2k views

How to protect contact forms against being misused for mass-mailing?

A common function of contact forms is to send the contact message not only to the site owner but also to the person who sent the contact request. What are good measures to protect against the form ...
4
votes
3answers
1k views

Using + for email addresses to find out who is selling your data: is it naive or is it effective?

It's pretty common among security-minded folks to fill in addresses using e.g. foo+company@gmail.com when disclosing their email address to company so that they can tell if company has sold their ...
6
votes
4answers
7k views

Are automatic “out of office” email replies bad security practice?

I remember reading somewhere that you shouldn't reply to spam because it confirms that the email is used, and makes it more likely that you will be targetted. Does this mean that automatic replies ...
5
votes
1answer
925 views

random-string spam probe messages?

For years, we've been receiving messages through our contact form in the following format: name: vlsyekcz email: jjthiy@toaagq.com subject: BdsQiWYlYo body: 2BLgIr <a href="http://aixfhxcynapd.com/...
5
votes
1answer
125 views

Block spam that looks like it is coming from actual humans, and not bots?

I work for an educational institution, and we are seeing entries from our admissions application that amount to spam. Currently I only have one honeypot applied to thwart the spam bots, but these ...
4
votes
2answers
2k views

How does the Yahoo webmail exploit work?

I got an email (referring to me by name) from somebody I knew a while ago and the email itself was just two/three lines containing a bit-ly link. Although it seemed like it actually could be ...
2
votes
2answers
1k views

mod_spamhaus whitelist example to allow a range of ips

How would an example whitelist look like, that would whitelist a range of all IPs from 123.123.0.0 - 123.123.255.255 ? I have the whitelistfile in /etc/spamhaus.wl
11
votes
3answers
1k views

How did the spammers get this address?

A few months ago I configured a test mail server on Amazon AWS, all legit. I used a new address to my catchall-domain (something similar to, but not exactly, test-config-aws-neptune-2014-08@my-domain....
7
votes
2answers
5k views

Is there a dictionary of visibly similar Unicode characters for Spam processing?

I have spam that looks like this: мy вυddy'ѕ мoм мαĸeѕ $74/нoυr oɴ тнe lαpтop. ѕнe нαѕ вeeɴ lαιd oғғ ғor ѕeveɴ мoɴтнѕ вυт lαѕт мoɴтн нer pαy cнecĸ wαѕ $19420 jυѕт worĸιɴɢ oɴ тнe lαpтop ғor α ...
4
votes
1answer
4k views

A “new domain registration” spam?

About 6 days ago I purchased a new domain under .org TLD from a local registrar. Few days later, I have received this strange message (which BTW fell to Gmail spam bin), which looks like some kind of ...
3
votes
1answer
188 views

Spam link returns empty redirect to google.com - am I missing something?

In this question someone received what was clearly a spam link. Sometimes I'm curious enough to take a peek, which I usually do with curl or other command line tools (less risk of drive-by malware, ...
3
votes
2answers
4k views

How can I have received this email?

I usually delete SPAM, but this email caught my attention: As you can see, in "To:" field there is spammer account, but I thought: it's not important, in message header there must be some hidden "for"...
2
votes
3answers
89 views

Stopping Spammers From Using My Website's Messaging

I own a website. The website connects between people providing a service ("servicers") and people interested in receiving that service ("servicees"). A servicee performs a search on the site and ...
2
votes
1answer
132 views

Why are packets constantly being sent to international ISPs?

When using a packet sniffer, I notice a lot of packets being sent to a bunch of ISPs (such as axion.ca, wanadoo.fr/orange?, bresnan.net, zebra.lt) usually all at the same time. Here's a screenshot of ...
2
votes
1answer
45k views

Suspicious text received from my # but I did not send it - is there definitely a virus involved, and if so who has it, the sender or receiver?

A close friend texted me this morning asking if I meant to send that last text, noting it was suspicious. I asked for a screenshot of the text in question, and it is a text from my number with spam I ...
2
votes
1answer
4k views

How do botnets deliver spam? [closed]

I can't seem to find the answer to this question. I read that botnet bots are used as email relays (they have smtp servers installed). Wikipedia on Open mail relay: "(...)Internet initiatives to ...
1
vote
1answer
873 views

“Secure” emails from unfamiliar source(s)

The context is long, so I'll ask my question first. If an encrypted message is received from an unfamiliar sender and it's spam, how can I avoid receiving further messages of the same sort? If it's ...
0
votes
0answers
79 views

Spammer using LinkedIn for redirects dangerous or just spam? [duplicate]

I fell victim to a spam attack as outlined in this other posting here. I clicked on the link and was redirected through a bunch of pages. Does someone know whether this is just spam or actually ...
-2
votes
1answer
310 views

Stopping spam and worms with SPF [closed]

Sender Policy Framework is a system to detect spoofed emails. From http://www.libsrs2.org/overview.html : WHAT EMAIL FORWARDING SERVICES NEED TO KNOW ABOUT SPF To combat spams, worms, and ...