October 20th, 2008

Found a HSBC phishing spam in junkMail folder today.
Why it look real ?
1) Email name is “HSBC”
2) Logo look perfect same.
Why it look fake ?
1) Email address from HSBC.Bank@XX is invalid email
2) Subject is Security Update
3) the URL link actualy is ip address. if you click on it is a phishing site with http:// ip address and
hyperlinks to non-Bank of malaysia domains
4) phrases like “Thank of Banking HSBC” twise in begining and End paragraph.
Never click from the email for accessing bank account.
Getting a effective anti-spam engine will help you to identify and get out the risk of this.
Posted in Spam Mail | 1 Comment »
September 25th, 2008
There is high number pharmacy spam recenlty , but still able to catch it using URLBL .
refer the mail detail, all the image file with this type of name, footer.jpg, logo.jpg and header.jpg
1.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
0.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist




Posted in Spam Mail | 2 Comments »
September 22nd, 2008
Spammers are always looking for ways to get their message past anti-spam filters, and HTML manipulations are part of their regular bag of tricks, but this one just looked so cool I wanted to share it with you. At first glance, it looks like the spammer simply wrote “Viagra vs. Cialis” vertically (that in itself is a known HTML trick):

But if you look a little more closely, or simply highlight the text in the spam message as I did below, you will see that each letter in the pharmaceutical is actually the first letter of a word, forming a kind of a spam poem:

How did the spammers select those particular words? (there are dozens of different versions, each with similarly innocuous words like “vanished,” “intervals,” “light,” “steps,” etc.). Well, I am willing to bet that they specifically selected words that are strong “Bayesian Poison,” i.e. words that typically appear in legitimate correspondence, and score well on Bayesian tests, confusing those types of content-based filters.
author Rebecca Herson from commtouch
Posted in Spam Mail | 2 Comments »
September 20th, 2008
new image spam recevied today, can your anti-spam enginee catch it ?
Posted in Spam Mail | No Comments »