Re: Web host spam vs spam filters

> One obvious difference between a botnet compromised windows desktop
> and a botnet compromised unix webserver would seem to be that the
> webserver probably has a perfectly functional MTA, meaning that it'd be less
> likely to have some of the obvious giveaways (protocol and headers) that the
> mail from compromised desktops often has.

Yes - though I've been told that most of the scripts used to send botnet spam aren't very different than what's used on Windows boxes. At least they don't seem to use the local MTA.

Martijn.


________________________________

Virus Bulletin Ltd, The Pentagon, Abingdon, OX14 3YP, England.
Company Reg No: 2388295. VAT Reg No: GB 532 5598 33.
-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org