full-disclosure - Mailing lists and unsolicited/malicious spam

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200411262013.iAQKDhKf017050@turing-police.cc.vt.edu>
From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Mailing lists and unsolicited/malicious spam 

On Fri, 26 Nov 2004 16:51:27 GMT, n3td3v said:

> Yahoo! Groups, a fully featured user group and mailing list has taken
> steps to prevent malicious users harvesting new e-mail addresses to
> add to spam list databases. They (Yahoo) cut the e-mail address on the
> website, so harvesting becomes impossible by only showing the user
> side of the e-mail address. Example "n3td3v@...".

So you take that left-hand side, and do this:

for i=1 to 100
	send_spam("leftside@" || common_domain[i]);
done;

OK, so for 95 of them it generates a bogus address, and you might even miss
the actual domain of the person you targeted, but if you get 5 accidental
matches..

(And yes, they do this - when you have 40K zombies, trying 100 million addresses
in the hopes of hiting 100K actual addresses is a sensible way to do things...)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20041126/d85da23c/attachment.bin