Strange and new spam?
Posted on 2007-07-20
Has anyone seen this. Since about 15 hours (21:05 CET, 19th June '07) we are receiving very strange spam. In the order of tens per hour.
The content is nonsense and there is also no commercial message of attachments.
- Subject: allotted debilitate abramson
Body: breakup collet, ding diagnoses author, conduct amethyst. classificatory burdensome bp abrade
applied awe cowl. cavil bitternut clammy absence ablaze azure bocklogged agricola
bernstein deemphasize amelia axiom. baroness distributor derriere abbreviate census baggage appendage
- Subject: biggs blossom bore
Body: deliverance billiken, craze compagnie blandish, astronomic coriander. content automate diploma crook
cumulate cringe babble. bodice compulsion contraceptive ditch bonus climate detriment ambivalent
coolheaded animate cincinnati carbine. did conversion canine charlottesville admix divergent cerberus
Our spam filters (NetApp appliance) has done an almost perfect job in filtering real spam since I installed it about 4 months ago. The first message is an example that has not been blocked or marked. The second one was also not blocked but it was marked.
All messages oriented at valid or nearly valid email addresses. The nearly valids are addresses which are no longer used or with small variations on existing email addresses. Those addresses are clearly on a spam list because we are used to getting lots of spam to those same valid and nearly valid addresses. For me, this proves that the same spammers are behind this.
My guesses are:
- The spammers are trying out new techniques
- They have deployed a new technique (like the recent PDF attachments) put the implementation is flawed as there is no real message
- An error in their botnet
I'm not trying to solve this, just trying to better understand what's happening. So:
- Is anyone else experiencing this?
- Other guesses why this is happening?
- Any other feedback.