Blank Spam ???

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Norm - 19 Jun 2006 14:09 GMT

Not sure which is correct newsgroup for this but.....

Recently been getting a number of emails (assume some type of spam) that
has no subject, no body and the from shows as: three bullet marks, then
a question mark, and then three more bullets.

What would that be?

Thanks for any education on this.

Signature

Please send email to: nwhiii at yahoo dot com

Reply to this Message

Peter Ceresole - 19 Jun 2006 14:29 GMT

> Recently been getting a number of emails (assume some type of spam) that
> has no subject, no body and the from shows as: three bullet marks, then
> a question mark, and then three more bullets.

They've been around for a while. If you click on Blah-Blah-Blah, you'll
see that they have a return address- mine all seem to be different.
There's a blizzard of them in progress now and we've been discussing
them elsewhere. Nobody knows quite what they're about. Somebody put up
this url:

<http://isc.sans.org/diary.php?storyid=1427&rss>

I'm not sure it it gets us any further. The general consensus from way
back seems to favour the broken spam theory- some bozo may have suddenly
gained control over a zombie farm, thousands of virus-infected PeeCees
spewing them out. Or maybe they assume that any address that doesn't
reject the things is live and can be spammed. Nobody seems to know. But
they seem to be harmless and at least they're damn small and easy to
filter out.

Signature

Peter

Reply to this Message

Bill Cole - 20 Jun 2006 03:50 GMT

> > Recently been getting a number of emails (assume some type of spam) that
> > has no subject, no body and the from shows as: three bullet marks, then
[quoted text clipped - 15 lines]
> they seem to be harmless and at least they're damn small and easy to
> filter out.

Given the quirks of the messages and how they are sent, is is very
unlikely that they are sent that way consciously. Typically, the message
data ends abruptly in the middle of a Message-ID header that is so
malformed as to be thrown away and replaced by some mail servers. In
addition, the sender addresses on the ones I've seen are blatantly
invented to match the zombie machines being used to send, not to make
bouncing possible.

As a delivery test, this mail is no better than sending no mail at all,
but instead just ending the SMTP conversation after the RCPT command.

Signature

Now where did I hide that website...

Reply to this Message

Mac Forum / Applications / Eudora / June 2006

Blank Spam ???