Slashdot Mirror


Hidden Messages in Spam

randomwalker writes "There was an extremely interesting presentation at the Blackhat Windows Security Conference in January by Dr Curtis Kret entitled Nobody's Anonymous. In his presentation he showed how information about spammers can be determined. In addition he showed that some spam is being used as a covert communication channel. This presentation demonstrates how to apply data forensics to spam in order to identify the sender of specific spam messages. Some senders can be identified by name, while others can be distinguished by attributes such as preferences, nationality, religion, and even left-handedness. Four spam categories are provided that classify spam by function, including List Makers, Scams, and Covert Communication channels. The examples provided include full-disclosure case studies: a phishing gang that targets bank customers with malware and impersonations, and an IRC group that uses spam as a covert communication channel."

6 of 232 comments (clear)

  1. spammers are terrorists by Anonymous Coward · · Score: -1, Troll

    why not unleash the usa's home security dept on these bastard spammers?

  2. hidden messages? by zephc · · Score: 1, Troll

    We have lots kill of viagra president for you to get a bush hard erection.

    p.s.: kill kill kill.

    --
    "I would say that 99 per cent of what my father has written about his own life is false." - L. Ron Hubbard Jr.
  3. Presentation contains hidden message by JohnGrahamCumming · · Score: 0, Troll

    Must do, I looked at all 73 pages and didn't learn anything.

    John.

  4. Re:Covert Messages by dolo666 · · Score: 0, Troll

    > Funny? Mod: Interesting, please.

    And that'd make you a troll. At least we've got our species, genus and phylum in check. Anything else?

  5. spam spam by Anonymous Coward · · Score: -1, Troll

    Dear Friend , You made the right decision when you
    signed up for our club . If you no longer wish to receive
    our publications simply reply with a Subject: of "REMOVE"
    and you will immediately be removed from our mailing
    list ! This mail is being sent in compliance with Senate
    bill 2016 , Title 8 ; Section 304 ! This is NOT unsolicited
    bulk mail ! Why work for somebody else when you can
    become rich within 11 DAYS . Have you ever noticed
    how many people you know are on the Internet and how
    long the line-ups are at bank machines ! Well, now
    is your chance to capitalize on this ! WE will help
    YOU turn your business into an E-BUSINESS plus decrease
    perceived waiting time by 120% . You can begin at absolutely
    no cost to you ! But don't believe us . Mrs Jones of
    Missouri tried us and says "Now I'm rich, Rich, RICH"
    ! This offer is 100% legal ! You have no reason not
    to act now ! Sign up a friend and you'll get a discount
    of 70% . Thanks ! Dear Friend ; Your email address
    has been submitted to us indicating your interest in
    our briefing . This is a one time mailing there is
    no need to request removal if you won't want any more
    ! This mail is being sent in compliance with Senate
    bill 2016 ; Title 9 ; Section 303 ! This is different
    than anything else you've seen . Why work for somebody
    else when you can become rich in 91 MONTHS . Have you
    ever noticed most everyone has a cellphone and people
    will do almost anything to avoid mailing their bills
    ! Well, now is your chance to capitalize on this !
    WE will help YOU SELL MORE and process your orders
    within seconds ! The best thing about our system is
    that it is absolutely risk free for you ! But don't
    believe us ! Prof Anderson who resides in Rhode Island
    tried us and says "I was skeptical but it worked for
    me" ! We are a BBB member in good standing ! Do not
    go to sleep without ordering . Sign up a friend and
    your friend will be rich too . Thank-you for your serious
    consideration of our offer . Dear E-Commerce professional
    ; Especially for you - this red-hot news ! If you are
    not interested in our publications and wish to be removed
    from our lists, simply do NOT respond and ignore this
    mail . This mail is being sent in compliance with Senate
    bill 1619 ; Title 3 ; Section 308 . This is not multi-level
    marketing ! Why work for somebody else when you can
    become rich in 78 weeks ! Have you ever noticed nobody
    is getting any younger & more people than ever are
    surfing the web ! Well, now is your chance to capitalize
    on this . We will help you increase customer response
    by 200% and increase customer response by 170% . You
    can begin at absolutely no cost to you ! But don't
    believe us ! Prof Ames of Tennessee tried us and says
    "Now I'm rich many more things are possible" ! We are
    licensed to operate in all states ! We IMPLORE you
    - act now ! Sign up a friend and your friend will be
    rich too . Thanks .

  6. another 600lb gorilla by CountDown · · Score: 0, Troll

    Hello! People! There is a 600lb gorilla in the room. Think! This is just another scare tactic.

    George W. Bush, and the other powers that be are going apeshit over the internet because they can't control it.

    Bill Gates tosses and turns all night thinking about millions of email whizzing about from which is making not a cent.

    Surely, there's an answer to both problems. I know, let's tell the people they need to be protected from spam! They want to protect us from spam because it's annoying, because it's immoral, and now because terrorists are using spam to send secret messages?

    Good grief, we've seen this same tactic so many times. Spam can be annoying, I agree, but in this case the cure is far worse than the disease.

    They are trying to scare us into allowing them to regulate the internet, or at least charge us for email.

    More importantly, all of this communication scares them to death. They are afraid the great unwashed will discover the man behind the curtain.