<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Scamsters use URL spoofs to evade spam filters</title>
	<atom:link href="http://www.allspammedup.com/2009/09/scamsters-use-url-spoofs-to-evade-spam-filters/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.allspammedup.com/2009/09/scamsters-use-url-spoofs-to-evade-spam-filters/</link>
	<description></description>
	<lastBuildDate>Mon, 08 Mar 2010 15:23:31 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
	<item>
		<title>By: Leon</title>
		<link>http://www.allspammedup.com/2009/09/scamsters-use-url-spoofs-to-evade-spam-filters/comment-page-1/#comment-5657</link>
		<dc:creator>Leon</dc:creator>
		<pubDate>Sat, 06 Feb 2010 03:24:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.allspammedup.com/?p=1511#comment-5657</guid>
		<description>I am getting a new type of spam at my hotmail address.

Seems there are a lot of websites being compromised as they are being mentioned in these emails.




The spams all  look the same, or similar. and follow the same pattern
Two URL&#039;s with  different wording saying &quot;get this product here&quot; and one saying &quot;to unsubscribe click here&quot; - as if to indicate the user had granted permission to receive this email, making it legitimate.



The trick is that the spam contains the URL&#039;s of legitimate websites, and mentions legitimate products, eg &quot;find the best school to attend&quot;, so gets past hotmail&#039;s anti-spam



They started off as offers to  &quot;find a maid&quot; and various ways to describe cleaning services, but now  they keep changing eg teaching degrees,  sell timeshares,
etc


But the thing is the email contains URL&#039;s to  completely different websites each time. And the URLS point to  websites that  are for companies that don&#039;t match the product mentioned by the emails.


It seems that the websites listed  in the emails must be compromised and the spammers intention is that the  user will click on the URL and the compromised website will either directly serve spam advertisements or malware, or  issue redirects  to a site that will.


Or perhaps its just part of a &quot;increase view counters&quot; campaign... Websites that pay for increasing view counts may be hoodwinked.</description>
		<content:encoded><![CDATA[<p>I am getting a new type of spam at my hotmail address.</p>
<p>Seems there are a lot of websites being compromised as they are being mentioned in these emails.</p>
<p>The spams all  look the same, or similar. and follow the same pattern<br />
Two URL&#8217;s with  different wording saying &#8220;get this product here&#8221; and one saying &#8220;to unsubscribe click here&#8221; &#8211; as if to indicate the user had granted permission to receive this email, making it legitimate.</p>
<p>The trick is that the spam contains the URL&#8217;s of legitimate websites, and mentions legitimate products, eg &#8220;find the best school to attend&#8221;, so gets past hotmail&#8217;s anti-spam</p>
<p>They started off as offers to  &#8220;find a maid&#8221; and various ways to describe cleaning services, but now  they keep changing eg teaching degrees,  sell timeshares,<br />
etc</p>
<p>But the thing is the email contains URL&#8217;s to  completely different websites each time. And the URLS point to  websites that  are for companies that don&#8217;t match the product mentioned by the emails.</p>
<p>It seems that the websites listed  in the emails must be compromised and the spammers intention is that the  user will click on the URL and the compromised website will either directly serve spam advertisements or malware, or  issue redirects  to a site that will.</p>
<p>Or perhaps its just part of a &#8220;increase view counters&#8221; campaign&#8230; Websites that pay for increasing view counts may be hoodwinked.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 5 Security Threats Expected in 2010 @ Tricerion Security Blog</title>
		<link>http://www.allspammedup.com/2009/09/scamsters-use-url-spoofs-to-evade-spam-filters/comment-page-1/#comment-5041</link>
		<dc:creator>5 Security Threats Expected in 2010 @ Tricerion Security Blog</dc:creator>
		<pubDate>Fri, 08 Jan 2010 18:35:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.allspammedup.com/?p=1511#comment-5041</guid>
		<description>[...] Two of the ones I found somewhat surprising were shortened URLs (since fraudulent URLs look just like legitimate URLs when they&#8217;re shortened); and malware coming through sites with tricky URLs that look authentic but aren&#8217;t (like International Domain Names). [...]</description>
		<content:encoded><![CDATA[<p>[...] Two of the ones I found somewhat surprising were shortened URLs (since fraudulent URLs look just like legitimate URLs when they&#8217;re shortened); and malware coming through sites with tricky URLs that look authentic but aren&#8217;t (like International Domain Names). [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
