Slashdot Mirror
Anti-Spammers Infiltrate Private Online Spam Clubs
Angry_Admin writes " Spammers are now trying to find out which antispammers have infiltrated their ranks and are sharing "sensitive" info with fellow antispammers. According to the story at The Register: 'Online spammer forums like the Pro Bulk Club the Bulk Club and bulkmails.org have been gatecrashed by activists from organisations like Spamhaus. Steve Linford of Spamhaus said spammers know this already but they don't know who amongst their number is working for the other side. In theory the members-only forums of these sites is accessible only by invitation and only to individuals who have a proven track record in spamming. Apart from playing with the paranoia of spammers, the undercover investigation cast light on the latest spammer techniques.' Hopefully the spammers aren't that bright and the antispammers stick around long enough to bring them down."
Someone forgot the first rule of Spam Club...
Trolling is a art,
So there are forums out there for spammers by spammers? Do these forums get spammed also? I, personally, would love to leave a few choice words on those forums.
If someone could get that, we could, at least temporarily, reduce this problem.
I've got a baseball bat and loads of free time.
Post your email address and I'll tell you ;)
I have to ask where does the money come from in spamming? I could understand back in the mortgage boom when brokers were paying lot's of hard cash for leads, but this and other stories make spamming seem like a pretty big business which is rather surprising. Ultimately the money has to come from somewhere (the spam lists can only be sold so many times).
Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
> I wonder how they got in if it's invitation only.
I imagine they received many invitations, and simply didn't opt-out by clicking on the handy links at the bottom.
They're bypassing the zillions of filters I have set up like they're bound and determined to enlarge my penis, and bypassing my filters at a rate of 30 messages/day these days. The Spammer is just as smart as the anti-spammer IMHO. Play your enemy as your equal people....
...in bed
The same way I keep getting added to all these "opt-in" spam lists.
"Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
I wonder how they got in if it's invitation only.
:o)
One would assume they got invited.
Seriously, only "known" spammers get invites - but the question is - what constitutes "known"?
How hard would it be for an anti-spammer to set up a bogus online identity, list themselves as spammers, and then sent spam-like emails to the spammers' email addresses, and then wait for an invite?
"Hopefully the spammers aren't that bright and the antispammers stick around long enough to bring them down."
Just because someone does something you don't like, since when did that make them more stupid (or less intelligent) than you?
Sounds like the same tired argument that anti-virus companies and virus writers use.
Some of the "infiltrators" are actually people working at the ISPs hosting these private forums.
Let's see, what were the club names?
Pro Bulk Club
The Bulk Club
bulkmails.org
Egads, with such a raw display of creative thinking, we don't stand a chance. [grin]
A goal is a dream with a deadline
sorry, I'll get back to work now....
A goal is a dream with a deadline
Given the ethics of spammers, is it any wonder that one of their own might "betray" them?
It's a tired old argument but if no one clicked the links in spam and no one bought the products in spam, perhaps we wouldn't have spam. The people spamming aren't stupid, they know a sucker is born every minute and they hope those suckers click their links. If the clickers would grow a brain we might not have this problem.
$#!^ happens, but why does it always have to happen to me???
Dear Sir/Madam, I approach you with this offer due to the recent death of [county] Minister of Justice [name] because there is a secret bank deposit box, containing the sum of two (2) invitations to spam club. Half of these can be yours, generously. Email for details. P.S. the box also has six p3n!s enl.ar.ge.rs, five bottles of the blu* pi11 C:@l:s, and the absolute L0WEST *R*A*T*E*S for yr. m-ort-ga-ge & /\UTO W@rrn+iez.
I wonder how they got in if it's invitation only.
Dress in dark camoflage.
Shoot grappling hook to rail around roof.
Get to rooftop, shoot guard on balcony with silenced .22
Remove camoflage.
Use suction cup on skylight, cut out pane of glass and discard.
Secure rope and drop into upper floor office.
Climb down rope.
Use chloroform-soaked rag on guard outside office door.'
Pull out CDR with "email addresses" written in Sharpie Marker on it.
Walk down to party, take glass of champagne from waiter.
Send signal to antispammers telling them you're in.
Duh, how else do you think they did it?
Trolling is a art,
"People selling these fresh proxies are either the virus writers themselves or someone very close to them. I don't know how ties between spammers and virus writers was first forged but there is clearly a strong link there"
...and maybe this is the bit of information that will encourage aggressive prosecution of these spammers.
Now, just give me a shotgun, a case of ammo, and a list of related addresses. It's about time we sent unsolicited E-Mailers some unsolicited lead pellets.
-Vendal Thornheart
Since $ (or yen, marks, rubles, lira, etc) is all that any spammer wants in the first place, it logically follows that any of them can be bribed to spill all the secrets (like how to gatecrash, or instead to formally invite an antispammer, etc).
I cant seem to get to that website "bulkmails.org"
....
I keep hitting my refresh button over and over and over and over and over again - but it doesn't come up
hmmmmmm....
---- "Logoff! That cookie shit makes me nervous!" - A. Soprano
But the most popular download these days isn't Kazaa, it is Adaware. http://download.com.com/3101-2001-0-1.html?tag=pop Spybot is No. 3 in the rankings.
The Flynn Effect is the reason why IQ tests are routinely recalibrated. Basically, information and ways of thinking that start out the purview of an elite few eventually become the norm for the average individual in a sort of intellectual trickle-down.
I was at a party the other night and got into a conversation with a guy who wanted some advice from me, as a Web developer, on setting up a commercial Web site. At first the conversation was pretty normal -- we talked about the choice of servers, languages, back-end databases, etc. Then he asked me, "How can I make sure people go to my site?"
...
So I talked about Google PageRank, targeted vs. untargeted advertising, making his site attractive enough to inspire users to stay on it, making sure it's simple enough that it loads quickly and works on different browsers, etc. And he seemed to be listening, but after a while he asked me, "No, I mean when I send people e-mail advertising my site, how do I make sure they go to it?"
I had to talk to him for a while to make sure he was saying what I thought he was saying, but after a while it became pretty clear that the deal is this: he's going to be running a site selling Brazilian sex tours, and he wants to know how to send spam that will a) get people to go to his site, and b) get through spam filters.
Needless to say, the conversation didn't last long after that, but it did provide some insight into the mind of the spammer. He really didn't see anything wrong with spamming, or even with trying to be deceptive to get past spam filters. As far as he's concerned, he's selling a service people will want if only he can get his message through. I'd say he was an aggressively normal guy -- a bit of a yuppie, with a backwards baseball cap and a lite (sic) beer, definitely not a geek, probably watches lots of football and drives an SUV.
These are the people who are crapflooding your mailbox. They're not mysterious creeps living in caves. They're your neighbors. Be aware. Eternal vigilance is the price of liberty
The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
Just a random thought:
Isn't this just a distributed denial of service attack on my inbox?
*DrugCheese rants*
To my credit I had written into the system a very simple and effective opt-out. Click, click, we were out of your life. Everyone on the list had taken the time to fill something out to get on the list. It wasn't really spam.
At least that's what I tell the voice in my head.
I also wrote the web statistic reporting engine, so I do know that pageviews to the website would skyrocket following a bulk mail. And no, most of the traffic wasn't for the "opt out" bin.
This was back in '98, when spam was a joke, not a fact of life. I recently turned down a job reverse engineering a web-database of a certain annoying industry to generate targetted mailing lists.
And that was from my brother.
"Learning is not compulsory... neither is survival."
--Dr.W.Edwards Deming
Many spammers make their money by selling advertising service to retailers by promising to deliver eyeballs which can be turned into sales, but don't handle delivery of the product. Sometimes they're getting paid a commission, so they make money if and only if they're successful at attracting suckers to the retailer's products or websites - whether that's pills or pr0n.
But for many other spammers, the sucker is the retailer who's expecting to get high-quality sales leads, rather than the spammees. Retailers who've learned from the experience usually don't provide repeat business, or at least not without changing the price structure to only pay for actual sales.
And many spammers make money from fraud. Besides the currently popular Nigerian 419 and the pump&dump stock scammers, there's the old-fashioned pyramid game in its many guises. That used to be more popular than it is today, but it still seems to work. One variation on this is selling spamware to wannabee spammers.
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
Well, Sir Gallahad, Sir Lancelot, and I hid inside a giant wooden Hormel crate in front of the castle ....
Evidence, please.
Let's see. Class III narcotics? Check. Stock market pump 'n dump? Check. Nigerian scams? Check. Hijacked machines? Check.
...
All of these are seriously illegal.
So where are the cops?
It'd be amusing (yes, I have a sick sense of humor) to find out that everybody in the chat room was a cop, just waiting for a real spammer to log in
Welcome to the Turing Tarpit, where everything is possible but nothing interesting is easy.
Unfortunately, that specific mob of suckers that clicks on the spam messages isn't reading slashdot (we happen to be a completely different mob of suckers) and it's doubtful that they even know a "dot head". Therefore, telling us they should know better isn't going to do the least bit of good.
On the other hand, a different old argument would be appropriate for this group. Simply go to all those URL's (by retyping the top level url, clicking on them probably sends them a key to identify your email address), and submit lots and lots of fake orders. Heck, automate it if you can, with some kind of randomizer that picks odd names from a list so there's no easy way for the spammers to filter them out, and even better if you can impersonate a large network. Suddenly, to get one legit customer, you have to go through thousands of pieces of crap, and the business model no longer works.
Now, if someone could make a distribute app that accepts some kind of template (go to this url, put a name here, cc number there, etc) to automatically fill in and bang on a spam supported site, I'd be more than happy to run it.
The Register article points to another article which talks about how the arrest of the PhatBot worm creator may provide some information on the rental of hordes of compromised machine as networks of spam zombies. It lists a common price of $500 for 10,000 machines -- In other words, your box is worth $.05 to a spammer.
Sometimes boldness is in fashion. Sometimes only the brave will be bold.