Jump to content
Lking

Dumb spam

Recommended Posts

Tracking URL

We seem to be at the end of this run.  Poor "Katie" has forgotten how to uses the spam tool.

Quote

It appears to be that, (), is your password.

In addition to spam sent to my real mailboxes for the passed two weeks, this one was also sent to all the "standard" invalid boxes at this domain.  Prices varied from $1100 to $1800.  Those I looked at all came from some .ru TLD.  I didn't think to double check the bitcoin addresses to see they too were a "form" variable or not.

Conformation of the Spammer Rules "Spammers are Stupid" and Spinosa's Corollary

 

Share this post


Link to post
Share on other sites

The last four bitcoin addresses are different. reports all sent to the same IP

second example

Share this post


Link to post
Share on other sites

Also a side note, is that the spammer seems to be trying to rotate between base64 and plain text in order to use the password reported through spamcop to determine which email or password comes back.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×