homepage Welcome to WebmasterWorld Guest from 54.167.144.4
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / WebmasterWorld / Webmaster General
Forum Library, Charter, Moderators: phranque

Webmaster General Forum

    
How is that spam coded? Spammers workaround
Subject: Viagra. But is really: bV a IAGR y A
silverbytes




msg:380165
 2:07 pm on Jun 29, 2006 (gmt 0)

I was suprised to receive a spam with subject "Viagra" because is there a filter to avoid that runing.

Then discovered that the text, that appears as "Viagra" is really "bV a IAGR y A"

How do they do that? And How do you filter that?

 

physics




msg:380166
 4:30 am on Jul 2, 2006 (gmt 0)

Interesting, I often read email in pine (plain text) and see the 'V bx IAG y R A' type stuff but didn't realize those showed up as the actual word in some viewers. My guess is they use some sort of windows special characters that show up in the plain text but not in the subject line of outlook...

dragonthoughts




msg:380167
 6:03 am on Jul 2, 2006 (gmt 0)

The extra characters are present to defeat trivial filtering rules.

A common trick is to have a plain text version and an HTML variant of the email (many clients send this way too). Most email clients display the "richer" HTML by default.

The extra characters are hidden using the HTML, or CSS, so that the majority of recipients will read their content.

The plain text version and the HTML version must be substantially identical in appaernt content, or some filtering programs will realise the discrepency and block the content.

Quadrille




msg:380168
 9:54 am on Jul 2, 2006 (gmt 0)

They vary them all the time; each new form rapidly gets reported and added to filters.

I haven't had a v spam in my mailbox for months - they all go straight to my spam box.

But gmail filters are much better than most, as spam reports actually get used to develop the filters.

What kind of idiot buys chalk dust labelled as v anyway? Do they really still catch a single moron?

Seems hard to believe :)

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / WebmasterWorld / Webmaster General
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved