Full Disclosure mailing list archives
Re: weird worm ?
From: roy () rant-central com
Date: Tue, 30 Dec 2003 14:36:11 -0500
On Tuesday 30 December 2003 01:33 pm, Discini, Sonny wrote:
Yes, I have seen similar e-mails and yes, this appears to be word list probes to see what will and will not pass through your filter.
I don't think so. The examples I've seen here have been nothing but a string of nonsense words, with no link or web bug. A probe has to have some way of reporting success/failure, and I don't know many systems that bounce spam filter failures. They're much more likely to be attempts to poison Bayesian filters.
This also explains why the e-mail is coming from random sources. If it came from a real address, they know that any reasonable admin would add the domain to their block list.
That much makes sense. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: weird worm ?, (continued)
- Re: weird worm ? Daniel (Dec 30)
- Re: weird worm ? José María Mateos (Dec 30)
- Re: weird worm ? Nick FitzGerald (Dec 30)
- Re: weird worm ? Dennis Freise (Dec 30)
- Re: weird worm ? Joris De Donder (Dec 30)
- Re: weird worm ? Kare Presttun (Dec 30)
- Re: weird worm ? Tal Kelrich (Dec 30)
- Re: weird worm ? Papp Geza (Dec 30)
- RE: weird worm ? Rapaill (Dec 30)
- RE: weird worm ? Discini, Sonny (Dec 30)
- Re: weird worm ? roy (Dec 30)
- Re: weird worm ? Nick FitzGerald (Dec 30)
- Re: weird worm ? sebastian (Dec 31)
- Re: weird worm ? roy (Dec 30)
- RE: weird worm ? Mikael Abrahamsson (Dec 30)
- RE: weird worm ? Discini, Sonny (Dec 30)
- Re: weird worm ? José María Mateos (Dec 31)
- Re: weird worm ? Nancy Kramer (Dec 30)
- Re: weird worm ? Jonathan A. Zdziarski (Dec 31)