Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#233109 - 10/09/2004 00:21 Have you noticed how the spammers have turned...
gbeer
carpal tunnel

Registered: 17/12/2000
Posts: 2665
Loc: Manteca, California
... to gross misspellings in order to get past the filters. There's got to be some way to key on that. %words not recognized or some such.
_________________________
Glenn

Top
#233110 - 10/09/2004 03:55 Re: Have you noticed how the spammers have turned... [Re: gbeer]
canuckInOR
carpal tunnel

Registered: 13/02/2002
Posts: 3212
Loc: Portland, OR
If you're talking about substituting numbers/symbols for letters, yes, they've been doing that for quite a long time. My filter generates a munged subject line (essentially tr/$1!|@-*./siiia/),chops out white space, and does a pattern match on that for the big three (viagra, xanax, cailis). However, if you're using SpamAssassin, it adds an "IMPOTENCE" keyword in the X-SpamAssassin header, so you can key off that even easier. Using a combination of those two (SpamAssassin doesn't seem to catch everything), I'm now getting maybe one, or two spam slip through every few days. Don't know how you'd do that via Outlook/Mozilla/whatever.

Quote:
%words not recognized or some such.

It's been suggested before. Spammers are now adding a random collection of proper 'non-spam' words to the bottom of spam messages to counter this counter.

Top
#233111 - 10/09/2004 06:21 Re: Have you noticed how the spammers have turned... [Re: canuckInOR]
mtempsch
pooh-bah

Registered: 02/06/2000
Posts: 1996
Loc: Gothenburg, Sweden
Quote:
It's been suggested before. Spammers are now adding a random collection of proper 'non-spam' words to the bottom of spam messages to counter this counter.


Hmmm, maybe splitting the message into parts and do the %'ages on each part. Lots of misspellings in one or more parts (depending on how much you split it up) and none in others would be a strong indicator... Of course, then they'll just toss in some misspellings in the random block as well...
_________________________
/Michael

Top
#233112 - 10/09/2004 11:29 Re: Have you noticed how the spammers have turned... [Re: mtempsch]
andy
carpal tunnel

Registered: 10/06/1999
Posts: 5916
Loc: Wivenhoe, Essex, UK
A decent Baysian based spam filter is not fooled by these two tactics. Only a handful of spam get into my inbox, even though I am receiving many hundreds of spam messages a day.
_________________________
Remind me to change my signature to something more interesting someday

Top