Re: Re: Strange mail with number in subject line and body

Christine Kronberg <[email protected]> Wed, 7 Jun 2006 15:47:36 +0200 (CEST)
Newsgroups gmane.comp.security.incidents
Message-ID <[email protected]>
On Wed, 7 Jun 2006, [email protected] wrote:

> 
> They are not from any particular IP. 3 that I looked at came from a 
> Bell South IP, an IP in RIPE, and an IP in APNIC. Seems to be a bot network.
>
> My best guess is that this is meant to poison the statistics of bayesian mail filters and trick them into letting spam through.

   Do you really think a few mails with just a number in it will have
   a noticeable effect on the filters? To me it seems more likely that
   someone uses a bot net for address verification and list washing.

   Cheers,

   Christine Kronberg.


------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29. August 3 in Las Vegas. 
World renowned security experts reveal tomorrow.s threats today. Free of 
vendor pitches, the Briefings are designed to be pragmatic regardless of your 
security environment. Featuring 36 hands-on training courses and 10 conference 
tracks, networking opportunities with over 2,500 delegates from 40+ nations. 

http://www.blackhat.com
------------------------------------------------------------------------------