We just locked someone's account that was about to launch a process that would have sent the following message to exactly 2,700,000 email addresses.


Dear Sirs,

We offer you guaranteed quality, cost-effective contracting services
in desktop applications development, web and database programming,
bringing you the safety, cost-effectiveness, best talents, and highest
quality standards.

Technologies shortlist:
C/C++ (Visual C++ & MFC), Visual Basic, Java, Delphi,
Pascal, FORTRAN, Assembler languages for different processors
MS SQL Server, MS Access, MySQL, PostgreSQL, Oracle, DB2
MS Windows 95/98/NT/2000/ME, Linux, FreeBSD, Solaris
WinAPI, ActiveX, Microsoft DNA (DCOM/COM), ODBC, DDK, LDAP
XML/XSL, HTML/DHTML/WML, Macromedia Flash 4/5
Palm OS, Win CE 2/3, QNX

I offer you to gain advantages of cooperation with
qualified professionals from Infosys - and bear in mind:
you can start from the small contract to make sure of our
quality of services. You pay just for the ready results!

Contact me by e-mail replyreply

I look forward to hearing from you,

John McLain
Senior Marketing Manager

------------------------ * Disclaimer * -------------------------

IF YOU THINK THIS MESSAGE REACHED YOU IN ERROR PLEASE SEND BLANK
E-MAIL MESSAGE TO MARKETING@SOFTAURA.COM WITH
"UNSUBSCRIBE" IN THE SUBJECT.

I have a feeling some of those 2,700,000 people recieved that mail in error :D Silly spammers, make me :angry: :mad: :kaioken:

..... :sickface: :smash:
:uzi: :spam:



Okay, I went overboard with smilies. Sorry hehe,

Adios,

how did you came to know he is about to spam. pleaseeee tel me. :) :cartman:

Originally posted by NetXL
I have a feeling some of those 2,700,000 people recieved that mail in error :D Silly spammers, make me :angry: :mad: :kaioken:

..... :sickface: :smash:
:uzi: :spam:



Okay, I went overboard with smilies. Sorry hehe,

Adios,

lol :D

Originally posted by mahinder
how did you came to know he is about to spam. pleaseeee tel me. :) :cartman: Yeh Kiwi, How did you know about this if it was never sent?
And, if it was never sent; how can you quote it?

:cartman:Just curious

Glad you caught it in time Kiwi...

On a slightly different note, when I try to create a rule in Outlook to delete all mail from a certain person, it doesn't work (I've been trying to create this rule to reduce the amount of spam I receive) -does anyone have suggestions on how to create a rule that works?

Thanks
Matt

Yeh Kiwi, How did you know about this if it was never sent?
And, if it was never sent; how can you quote it?

Well, most of these spammers actually use a cgi script with a pre-made text, so it uses the server' sendmail.

They have the script configured to take the letter, replace the variables with the right things (like i just visited your web site, nottrue.com, and thought i would spam you...) and send it to the email address. This script can use alot of cpu :angry:

Originally posted by Ericd


Well, most of these spammers actually use a cgi script with a pre-made text, so it uses the server' sendmail.

They have the script configured to take the letter, replace the variables with the right things (like i just visited your web site, nottrue.com, and thought i would spam you...) and send it to the email address. This script can use alot of cpu :angry:

yeah around 3.20 on linux. one time there was spam from one of my machine which was running for about 4 hrs and we came to know after 8 hrs because i check the logs daily. i every wonder how to prevent sendmail from sending more then 1000 email from same PID within short period of time say 10 minutes. then it will take spammer 100s of hrs to complete his activty and between we can catch him and turn him off.

I don't create rules from stuff coming from a secific address, my junkmail filter rule thing uses common phrases such as "this is not spam" or "get out of debt". Just look through a few and find phrases that no one in their right mind would send in a normal e-mail. And remember, the lower the filter is on a list, the later it gets used. So if you wanted stuff to come through to say an abuse e-mail that had the keywords then make a filter below the junkmail one that sends anything going to that abuse e-mail address to a certain folder.

Additionally, there are still people searching out for formail scripts. Thank god a ton of them got fixed. I was watching the other day using a spy screen name in the AOL private chat: vb6

Some guy's program (the idiot's have programs that scroll how many formmails they've found, how many spam mails they've sent, etc... yet aol won't do a thing to them even after I report it a gazillion times) showed that he had tried to access 1,500 or 15,000 (can't remember which... either is pretty high to me) formmail scripts. It's insane.

sorry..

wrong thread

I just got some spam in my inbox trying to sell me 2.1 million addresses. Sounds like your spammer may have bought that list. Trying to make their $149 back I'd imagine... :) <sigh> When will people learn?

Kiwi, now why didn't you just modify their script to send all those emails to himself? Now that would be fun.

Would be fun, but it would also crash the server. :D :(

Umm... care to share how you spotted the spammer?

I was checking through the server for illegal files, found the spam scripts and message, backed it up and noticed the guy was about to launch it through SSH. ;)

Wow! That was a close call.

Did you email the spammer? S/he must of come up with some silly excuse :stickout

Was the domain softaura.com?

Reply below:


Dear Mr. Wyss,

I have received your email today and our corporate investigation has been already made. Indeed one of commercial agents who worked for us says that it was him who rented server space from your company and initiated that large amount of emails those cause your server go down. He wasn't no way authorised from me to do that, nore I have authorise him to make any mailing activities.

Till this time it was usual practice to grant free commercial agents who want to work for us in the direction of attracting new clients with our company's emails and their personal accounts for business correspondence. This particular accident urges us to increase our security and process of collaboration with such kind of business partners will be revised already this week. I have to say that we have discontinued our futher relations with John McLain and terminated his email and account.
We really apologize for inconvenience.

Sincerely yours,
Simon Rakhmanov
Marketing director
SoftAura Co.

Simon says... hahaa

Till this time it was usual practice to grant free commercial agents who want to work for us in the direction of attracting new clients with our company's emails and their personal accounts for business correspondence.

While before that, he says:

Indeed one of commercial agents who worked for us says that it was him who rented server space from your company and initiated that large amount of emails

:rolleyes: how screwed up can that be? :eek:

Originally posted by Dylan
Umm... care to share how you spotted the spammer?

Yes how did you find it?

Originally posted by multipleimage
Yes how did you find it?
Originally posted by Kiwi
I was checking through the server for illegal files, found the spam scripts and message, backed it up and noticed the guy was about to launch it through SSH. ;)

Originally posted by lovelie



By bad on this one. I didnt notice there was a second page...

Originally posted by ReflexHost_M
On a slightly different note, when I try to create a rule in Outlook to delete all mail from a certain person, it doesn't work (I've been trying to create this rule to reduce the amount of spam I receive) -does anyone have suggestions on how to create a rule that works?

I use Outlook as my e-mail application but I will admit one thing, rules don't work all that well. I have tons of rules setup for various things and from time-to-time, they just flat out don't work. They are setup fine and one moment a rule will work and five minutes later it won't. I blame it on good 'ol Microsoft just making a product with a flaw. Good luck getting your rules to work 100% of the time...