Saturday, August 19, 2006

Stardate 60632.91 - Smart Spam? Not So Much.

Spam is getting smarter and smarter. They are embedding the entire message in a graphic, they are using more and more legitimate sounding subject lines, as well as various other techniques to by-pass the spam filters. I seem to be in the middle of a mini-surge of it right now.

I got an e-mail on Friday that, at first glance, appeared to be legitimate. It had a Word document as an attachment, but the subject line, text, and From lines all appeared normal (at first glance). Here is the e-mail, minus the key spam indicator (I've also deleted my e-mail address):


So lets review:
  1. Subject line is legitimate. I get invoices from subcontractors and they frequently have subject lines very similar to this one.
  2. From line is legitimate (mostly, but more on that later). It has a reasonable-sounding name.
  3. Body text, while sparse, might be what you would expect some type of automated system to spit out, so while questionable, it could be legitimate.
  4. Attachment is a word document of reasonable size to be an invoice, with a legitimate (while obvious) name.
Here is where I got suspicious:
  1. The e-mail address it is to is my personal address. It was not my work address (all my e-mail comes into a single tool, so I only know work vs. home by the To: line).
  2. I didn't recognize the name on the From: line as anyone from subcontracts or any of the organizations I work with.
Then I looked at the expanded e-mail address on the From: line:

Carlene Sanders [pharyngotomy@fuckhermelons.com]

Yep! Spam!

Lesson: If you are going to all the trouble to make everything as legitimate as possible, don't use fuck-her-melons as your fake domain name.

NYC

6 comments:

Buddy said...

That is a "unique domain name" on the e-mail. I am very afraid of people who register things like that.

...what is the world coming to ???

Carlene said...

You made people wait all week for this?

I am still awaiting payment "Captain."

Love, Carlene

-s said...

This post and the comments have made iced tea come out of my nose.

cheryl said...

hee hee hee...Curt didn't get the second comment until I explained it to him : ))

When Curt showed me the original email I laughed so hard I cried. Had I been drinking iced tea, it probably would have come out the nose.

CAPT_Sawyer said...

I've been under a lot of stress this week...

-s said...

Funny as Carlene was, this was a bit of a letdown after your post earlier in the week. I expected page after page of thoughts, wit, and important sayings.