Kurbli

opsys | thin computing | tools

How spammers identify their targets

A Slashdot blogja mutatott rá Brent Huston, security.itworld.com igen lényeges cikkére.

Ebben tapasztalatai alapján részletezi a spammerek 4 fő technikáját:

  • The first, and least common, is spammers that obtain temporary legal and real accounts with ISPs.
  • The second method used to send spam is through compromised hosts, usually workstations and home computers on high-speed connections such as DSL or cable modems.
  • The third way spam is spread is using web forms.
  • The last, and most common method that spammers use is via open relays.

A következtetése is érdekes:

From this process I learned that they were doing much more server analysis than I expected before they dump their spam. I also learned that they do a multi-step approach. They scan the server for proper RFC compliance, and then they send a test message to a disposable address. Only after these are complete did they adopt the tool to dump their spam. This is much more cautious than I expected them to be.

Posted: Fri, Sep 15 2006 18:40 by Kurbli | with no comments
Filed under: ,