Skip to main content
Share Your Experience: Take the 2024 Developer Survey
182 votes

Received a set of SMS/MMS containing 2 photos, a voice message, and a text "I need help" with Google Maps link from a known contact. Is it spam?

This does not seem to be a virus. It is a panic function in some android phones, that allows to send these messages in case you are kidnapped or otherwise in danger by pressing the power button 3 ...
Peter Harmann's user avatar
108 votes
Accepted

Received a set of SMS/MMS containing 2 photos, a voice message, and a text "I need help" with Google Maps link from a known contact. Is it spam?

This is an exact description of the panic feature built into phones as Peter Harmann already said. Anecdotally I can tell you on my previous Samsung smartphone, I could trigger this exact feature by ...
Kallmanation's user avatar
  • 1,736
89 votes
Accepted

How did I get this email without a "To" field?

Why? Two explanations: BCC Spam I've often gotten spam where they seem to want to hide to whom it was addressed for some reason. Since I have a catch-all on my domain, it will arrive for me no ...
Luc's user avatar
  • 32.9k
45 votes

Browser is accepting italic/bold Unicode as part of SPAM email's URL

Previous answers both tell part of the story here, but there's a few different aspects to understand. Firstly, why do these code points exist? Unicode has the ambition to replace all previous ways of ...
IMSoP's user avatar
  • 3,900
39 votes

How did I get this email without a "To" field?

Headers like To, Cc and From are essentially all cosmetic; they don't control the actual receipients or senders of an email according to the SMTP protocol. It's possible to put whatever you like into ...
thomasrutter's user avatar
  • 1,647
39 votes
Accepted

How can I get more spam for my honeypot?

Spammers will "scrape" the internet for email addresses and use programs to collect millions of addresses. Or just download them. If you want your email address to be picked up by spammers, ...
schroeder's user avatar
  • 131k
37 votes

I receive spam despite a captcha, has my wordpress blog been hacked?

Posting spam doesn't require hacking in any ways. Regarding the captcha, there is two possibilities: Either the captcha is automatable (I don't know for your website, but I still encounter a lot of ...
WhiteWinterWolf's user avatar
28 votes

How did this email list a fake recipient?

When mail is sent via SMTP, there are two separate places this sort of information goes, the Envelope (things that are set with SMTP commands) and the Header (the first block of text under the SMTP ...
gowenfawr's user avatar
  • 72.9k
26 votes
Accepted

Browser is accepting italic/bold Unicode as part of SPAM email's URL

What you have here are mathematical symbols, see output from unicode text analyzer: Browser Codepoint Name # Fonts Script 𝙪 U+1D66A MATHEMATICAL SANS-SERIF BOLD ITALIC SMALL U 12 Common 𝙯 U+1D66F ...
Steffen Ullrich's user avatar
25 votes

Is email scraping still a thing for spammers

Scraping is still a technique spammers use to harvest victim addresses, but as there are far more methods today than there were a dozen+ years ago, scraping is no longer the primary mechanism to find ...
Adam Katz's user avatar
  • 11.7k
20 votes

How can I get more spam for my honeypot?

Besides the other good answers, I suggest setting up a catch-all email address. You'll find that a lot of spam goes to info@, webmaster@, postmaster@, abuse@ and so on. This typically requires that ...
Thomas Weller's user avatar
18 votes

How are spammers using LinkedIn "http://linkedin.com/slink?code=..." URLs?

So I just stumbled upon this today and got a similar message: https://www.linkedin.com/slink?code=eiurEkp?61778=myname First I tried the first part: https://www.linkedin.com/slink?code=eiurEkp ...
Sebastian G. Marinescu's user avatar
18 votes

How did I get this email without a "To" field?

So far I think that your address was used as BCC.
Mirsad's user avatar
  • 10.2k
17 votes

I receive spam despite a captcha, has my wordpress blog been hacked?

It's unlikely he's hacked into your site. It's also unlikely he's doing this manually. If you run a Wordpress site, bots will eventually find it and spam the hell out of it. Captcha resolution can ...
Ivan's user avatar
  • 6,328
16 votes
Accepted

What is this Russian calendar reminder that popped up?

It appears to be this: https://www.androidpolice.com/2019/06/22/google-calendar-phising-scam/ Scammers are exploiting [Google] Calendar['s] default setting, which automatically adds invites to your ...
Luc's user avatar
  • 32.9k
15 votes

How did I get this email without a "To" field?

It can be surprising, but this is quite normal in the SMTP protocol. A message is composed of headers and a body. It is send over a chain of Mail Transport Agents. No agent should change the body, but ...
Serge Ballesta's user avatar
13 votes
Accepted

What is the point of an attack using spam without any URL or attached file

It's a Nigerian email scam (as @Sravan commented). If you contact that email the scammer will promise you a lot of money and ask for a small fee for document copies, then a little more for document ...
ThoriumBR's user avatar
  • 54.4k
12 votes

How can I get more spam for my honeypot?

I have been using unique email addresses for each site and service for the past 15 years. So a simple grep lets me calculate how much spam is coming to each address. While anecdotal and only ...
jpa's user avatar
  • 1,299
11 votes
Accepted

What risks do I have now that I accidentaly opened a suspicious URL send to me by Skype?

What risks do you have? Possibly that your computer is now infected with malicious software like a virus or a trojan horse. The following steps should be taken if you didn't already. What to do? ...
Bob Ortiz's user avatar
  • 6,665
11 votes
Accepted

"Security through obscurity" is bad for security systems but good for spam detection. Why?

Security through obscurity is Always worse than an alternative which would be compliant with Kerckhoff's principal. However, sometimes this is simply not possible. One good example of this is DRMs. ...
Vince's user avatar
  • 151
11 votes

Is email scraping still a thing for spammers

It is possible for automated scripts to find a site almost immediately. But it can also take a while. As someone who ran honeypots for a long time, it was frustrating how long it could take to "...
schroeder's user avatar
  • 131k
10 votes
Accepted

Why does Outlook not block spam sent by employees?

Intra-domain emails (emails from your domain to someone else in your domain) have a much higher trust score, so they tend not to get blocked. This is done because legitimate employee-to-employee ...
schroeder's user avatar
  • 131k
10 votes
Accepted

Why do so many spam emails lately contain a lot of unicode characters?

Usually those are UTF8 sequences that resemble other characters, without being them. For example 𝒕𝒉𝒊𝒔 𝒔𝒕𝒓𝒊𝒏𝒈 is not the text "this string", and therefore does not trigger UCE detectors as ...
LSerni's user avatar
  • 22.8k
8 votes

Is Mailbait still a threat?

Whether or not those services are a threat is subjective and depends on your threat model. Whether or not they exist and can DoS a victim's mailbox with varying levels of effectiveness is not. Those ...
forest's user avatar
  • 66.8k
7 votes

How do I prove that my email was hacked?

For you to recieve emails from different sites your email does not have to be hacked. Anyone who has your email adress could have signed it up for different accounts or mail lists. Or it is just ...
Anders's user avatar
  • 65.6k
7 votes
Accepted

Getting about 6-7 spam emails every minute

The messages you show mean that somebody is using your email address as a sender. This might mean that your mail account is compromised but it can also be that the attacker got information about your ...
Steffen Ullrich's user avatar
7 votes
Accepted

Protonmail cannot read my mail — but can detect if it is spam?

As you hint in your third point, it's a difference if the mail is from and to a Protonmal account, or if one side is an third-party server. For the cases where the sender or receiver (one of them) ...
deviantfan's user avatar
  • 3,844
6 votes

How are spammers using LinkedIn "http://linkedin.com/slink?code=..." URLs?

Well, just by testing /slink?code=0 (a 404 error) and /slink?code=1 (LinkedIn Business Marketing Solutions), I'm guessing it's reserved for customers of LinkedIn Business Solutions. That said, I don't ...
Adam Katz's user avatar
  • 11.7k
6 votes
Accepted

Spam link returns empty redirect to google.com - am I missing something?

My first guess was the site was probably using your User Agent string to identify if you are vulnerable or not. As you are using curl and not changing the UserAgent, the exploit kit would redirect you ...
ThoriumBR's user avatar
  • 54.4k

Only top scored, non community-wiki answers of a minimum length are eligible