Odd Activist Spam
I’ve been getting spam with titles like:
“The Whore Lived Like a German”
and other german political messages, with links to:
http://service.spiegel.de/cache/international/0,1518,344374,00.html
translate.google.com/translate?sourceid=navclient&hl=en&u=http%3A%2F%2Fwww%2Eheise%2Ede%2Fnewsticker%2Fmeldung%2F59427
mommomtre@yahoo.com
To: private@cornell.edu
Date: Sun, 15 May 2005 01:44:20 GMT
Subject: [spam] Auf Streife durch den Berliner Wedding
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=”us-ascii”
X-PMX-Version: 4.6.1.107272, Antispam-Core: 4.6.1.106808, Antispam-Data: 2005.5.14.33
X-PMX-Version: 4.7.1.128075, Antispam-Engine: 2.0.3.0, Antispam-Data: 2005.5.14.34
X-Text-Classification: spam369Lese selbst:
www.zdf.de/ZDFde/inhalt/7/0,1872,2222503,00.htmlArs Technica. The article is ironically titled, “Spam makes you free” …
This entry was posted on Saturday, May 14th, 2005 at 11:16 pm and is tagged with auf streife durch den berliner wedding, www zdf de, whore lived like, ars technica, libasoli, zdfde, google, text classification, pmx, spiegel, political messages, content transfer, antispam, 2f, 3a, content type, cornell, activist, civil rights, ascii. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback. 13 Responses to “Odd Activist Spam”
Leave a Reply


I got that exact same message.
It was almost scary, since it was so on-topic to what I was writing about on Trendyblog.
I get about 20 a day of those sorts of things…
Well, I guess I’m lucky. I haven’t been getting the spam but people are hitting my blog cause I’m #4 when you do a search for “The ***** Lived Like a German” + spam.
Looks like you’re up to #3 on Google as I was searching for more info on these emails
The emails seem to all come from the same server: 69.164.61.221. I filed complaints as most of our employees are recieving this SPAM.
Me too – I found this blog via a google search.
I’ve received 400 of these mails in 24 hours and haven’t a clue why.
My website is a medical one, with nothing political whatsoever.
Am glad about the server information.
Kathy
Here’s a short article about that Neonazi-Spam.
That article doesn’t really tell me why its being sent, and I already know that I’m getting it… I wonder what the point is…
This Symantec site has all you need to know
http://securityresponse.symantec.com/avcenter/venc/data/trojan.ascetic.c.html
Good Luck – I got hit too – RVD
The form letter now being sent out by CIT:
Thank you for contacting the CIT Contact Center regarding the German spam messages you have been receiving. These messages are a new virus that is circulating through the Cornell e-mail system. Our PureMessage filtering servers are currently being updated to address this problem, so you should soon begin to see a dramatic decrease in the number of these messages you receive.
Please do not be alarmed if you are receiving these messages from addresses familiar to you or are receiving messages from “Mailer-Daemon” saying that you are sending out these messages. Most of these messages are being “spoofed,” meaning they are not really being sent from the e-mail address in the “From” line.
If you continue to receive many of these messages on Thursday or Friday of this week or have any other concerns, please contact us again by phone or replying to this email.
Sincerely,
Contact Center Consultant
Awesome. Looks like someone is using a botnet to send out these messages…
Our school, the University of Central Florida also got hit. I was getting 30+ a day at some points, and its been going on for over a week now. I guess they just now figured it out when symantec updated their virus definitions, I guess they don’t really check their server logs.
I just saw a message on my account stating that I sent it to others. Will I get it again?
clpgoidbm fszyrou pmvwc jlgvhiqrn rofydtgbu atio wrfzimjas