 SANS ISC Accidentally Steals Spammers Redirector, He who lives by SEO dies by SEO |
Other words, data, places --> SpamCop Pages
FAQs & Words
Newsgroups
WebMail
News-Recent Stuff
Poll on menu
This is a User to User Support Forum
The primary mode of support here is peer-to-peer, meaning users helping other users. (please remember this at all times!)
Another try:
This forum is composed of people who have used spamcop and those who are learning about anti-spam efforts.
  |
| GraemeL |
  Sep 21 2007, 07:32 AM
Post
#1
|
|
Advanced Member  Group: Membera Posts: 173 Joined: 21-January 04 Member No.: 17  |
Nice story on the SANS ISC Diary today.
The spammer uses SEO techniques to get his meds site the top result at Google for the search term “myvisameds global cart” and then sends out his spam run with a Google "I'm feeling lucky" link searching on those words. Result, anybody clicking on the Google link gets redirected to his site. A SANS handler notices what's going on and posts a diary entry documenting what the spammers are doing to avoid putting their domain names in the mail and getting them caught up by SURBL type scoring systems. SANS being popular and having a huge page rank means that it stomps all over the spammers SEO attempts and becomes the top result returned for the spammers search terms. Result: Anybody clicking on the link the spammer sends out now gets sent to the SANS diary entry rather than the spammers site. I actually laughed out loud when I got to the update at the bottom of the article where they reveal the effect of their posting the story. (IMG:style_emoticons/default/laugh.gif) -------------------- Evidence shows Cyveillance abuse internet resources.
I recommend unchecking their box in SpamCop reports. Cyveillance are part of the problem. They are not part of the solution. |
   |
 
|
| rconner |
Sep 21 2007, 01:12 PM
Post
#2
|
|
Advanced Member  Group: Memberp Posts: 872 Joined: 23-January 07 From: Maryland, USA Member No.: 7388 |
QUOTE(GraemeL @ Sep 21 2007, 08:32 AM)  Result: Anybody clicking on the link the spammer sends out now gets sent to the SANS diary entry rather than the spammers site. I've seen these IFL spams and wondered how effective IFL could really be as a redirection technique. First, it must take some time and effort for the spammer to get his site up to the top of the listings (so he can be in line for the IFL link), nd then it must be easy for a much larger and better-known site to "hijack" the IFL from him. Very amusing, this made my day. Score one for SANS. Hmm... I have a PR5 website... this gives me an ideer... -- rick -------------------- Richard C. Conner, P.E.
http://www.rickconner.net/spamweb/ |
 |
|
| Wazoo |
Sep 21 2007, 03:37 PM
Post
#3
|
|
What Life?  Group: Forum Admin Posts: 12536 Joined: 22-January 04 From: Iowa Member No.: 18 |
QUOTE(rconner @ Sep 21 2007, 01:12 PM) I've seen these IFL spams and wondered how effective IFL could really be as a redirection technique. First, it must take some time and effort for the spammer to get his site up to the top of the listings (so he can be in line for the IFL link) Is computing time measured as 'time and effort' these days? Latch onto some 'great marketing' software that places your stuff in over 500,000 (last time I looked) forums, blogs, list pages, wikis, etc. etc. etc. Twiddle your thimbs for a day or two, to give the search engine bots to do some collectiong. Then fire up that other great spam-spew-high-speed-advertising crap and turn it loose. What actually makes this 'easy' is that string of text being used for the search string. Technically, can you come up with any possible means of someone somehow actually mis-typing something that ended up with “myvisameds global cart” ?????? The results would be that the only place this "phrase" would exist is where the spammer placed it. Which then points back to things like weighting and scaling by the Seatch Engine indexing tools. The flip side to this is those outfits selling their services to "improve" your seach engine rankings ... Guaranteed to place 'your' page into the Top 10 results ..... a bit of tailoring of web-page content, edit the META tags a bit, then provide the customer a really interesting search string .... voila! The specific web-page on the first page of search engine results. Makes that $200-$100 seem worth it, but typically the 'new traffic' never comes. Eventually, someone points out that nobody in their right mind would ever put together a search engine query like the one used to "show that the page made it to the Top 10" .... |
|
|
|
| jongrose |
Oct 6 2007, 06:49 AM
Post
#4
|
|
Advanced Member Group: Membera Posts: 187 Joined: 23-February 04 Member No.: 480 |
I've seen these types of spams before, but when reporting them to SC, I always see that it refuses to send a report to Google's abuse dept. Is this because Google doesn't want reports from spams that included Google pages where they turned out to be an innocent bystander?
Google does have their own search result spam reporting page and a warning about rogue SEO companies, but I've never known exactly what to do when I see an UCE using IFL like the one mentioned. -------------------- The only good use for spam...
Have a look at my anti-spam links: http://del.icio.us/jongrose/antispam |
|
|
|
| rconner |
Oct 7 2007, 07:40 PM
Post
#5
|
|
Advanced Member Group: Memberp Posts: 872 Joined: 23-January 07 From: Maryland, USA Member No.: 7388 |
QUOTE(GraemeL @ Sep 21 2007, 08:32 AM) Nice story on the SANS ISC Diary today. The results are in: A Google search on "myvisameds" now turns up only about 13 hits, of which only the last is a spam site (which doesn't even seem to work). The rest are SANS and various blogs etc. (including a surprise newcomer) reporting on the phenomenon.-- rick (waiting for the next IFL keywords) -------------------- Richard C. Conner, P.E.
http://www.rickconner.net/spamweb/ |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
|
Lo-Fi Version | Time is now: 22nd November 2009 - 01:15 AM |
Invision Power Board
- Apple IIGs Powered © 2009 IPS, Inc.