What is the point of long rambling spam with gif attachments ?

dnsadmin 1bigthink.com dnsadmin at 1bigthink.com
Wed Feb 14 17:34:06 CET 2007


At 11:00 AM 2/14/2007, you wrote:



>Glenn Steen wrote:
>>On 14/02/07, BB <brent.bolin at gmail.com> wrote:
>>>
>>>Who in the world would actually purchase(Viagra etc...) from these places ?
>>>
>>>Harvesting valid email address ?
>>>
>>>Bug the heck out of people like us ?
>>>
>>>Malicious payload if not already ?
>>As you say, it is moronic at best... But you could well compare it to
>>Nigerian scams... The cost for sending is _very_ low/message. So to
>>make a buck, they don't need more than ppm-type "fallout"... If one in
>>a million do buy the coloured sugar pills, they will make a profit.
>>And it seems there are several "stages" involved, where the actual
>>botnet herder get paid for services, and so doesn't really depend upon
>>the outcome.
>>All in all, it just takes a few idiots to make it a profitable deal.
>
>Yep. in this morning's email:
>
>-- snip
>Get all your favorite RX Meds Online!
>With discreet fast FEDEX shipping! No Prescription Needed!
>Order Now -  japena . com
>-- snip
>
>All it hit was DATE_IN_PAST_06_12 :-(
>
>It's hitting DCC and RAZOR and yet another local rule now as well.
>You gotta have a sense of humor about this spam stuff.
>It really is just background noise.. oh.. and job security.

Keep your SARE rules up to date. Make sure it gets tagged as spam 
properly and then forward to:

US Pharma Spam: webcomplaints at ora.fda.gov
UK Pharma Spam: info at mhra.gsi.gov.uk
Intl Pharma Spam: drugs at interpol.int

Use accordingly with IP and WhoIs.

Mailing to these will not result in instant gratification.. but rest 
assured, if they can use your reports to tie in with an 
investigation, you may have helped nail one of these scum to the wall!

Cheers! 



More information about the MailScanner mailing list