Elliott C. Back: Internet & Technology

Odd Activist Spam

Posted in Spam by Elliott Back on May 14th, 2005.

I’ve been getting spam with titles like:

“The Whore Lived Like a German”

and other german political messages, with links to:

http://service.spiegel.de/cache/international/0,1518,344374,00.html
translate.google.com/translate?sourceid=navclient&hl=en&u=http%3A%2F%2Fwww%2Eheise%2Ede%2Fnewsticker%2Fmeldung%2F59427
mommomtre@yahoo.com
To: private@cornell.edu
Date: Sun, 15 May 2005 01:44:20 GMT
Subject: [spam] Auf Streife durch den Berliner Wedding
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=”us-ascii”
X-PMX-Version: 4.6.1.107272, Antispam-Core: 4.6.1.106808, Antispam-Data: 2005.5.14.33
X-PMX-Version: 4.7.1.128075, Antispam-Engine: 2.0.3.0, Antispam-Data: 2005.5.14.34
X-Text-Classification: spam369

Lese selbst:
www.zdf.de/ZDFde/inhalt/7/0,1872,2222503,00.html

Ars Technica. The article is ironically titled, “Spam makes you free” …

This entry was posted on Saturday, May 14th, 2005 at 11:16 pm and is tagged with auf streife durch den berliner wedding, www zdf de, whore lived like, ars technica, libasoli, zdfde, google, text classification, pmx, spiegel, political messages, content transfer, antispam, 2f, 3a, content type, cornell, activist, civil rights, ascii. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback.

13 Responses to “Odd Activist Spam”

  1. JWK says:

    I got that exact same message.

    It was almost scary, since it was so on-topic to what I was writing about on Trendyblog.

    I get about 20 a day of those sorts of things…

  2. Oxen says:

    Well, I guess I’m lucky. I haven’t been getting the spam but people are hitting my blog cause I’m #4 when you do a search for “The ***** Lived Like a German” + spam.

  3. Joe says:

    Looks like you’re up to #3 on Google as I was searching for more info on these emails :)

  4. TJ says:

    The emails seem to all come from the same server: 69.164.61.221. I filed complaints as most of our employees are recieving this SPAM.

  5. Kathy says:

    Me too – I found this blog via a google search.
    I’ve received 400 of these mails in 24 hours and haven’t a clue why.
    My website is a medical one, with nothing political whatsoever.

    Am glad about the server information.

    Kathy

  6. Claudia says:

    Here’s a short article about that Neonazi-Spam.

  7. That article doesn’t really tell me why its being sent, and I already know that I’m getting it… I wonder what the point is…

  8. Richard says:

    This Symantec site has all you need to know

    http://securityresponse.symantec.com/avcenter/venc/data/trojan.ascetic.c.html

    Good Luck – I got hit too – RVD

  9. Anonymous says:

    The form letter now being sent out by CIT:

    Thank you for contacting the CIT Contact Center regarding the German spam messages you have been receiving. These messages are a new virus that is circulating through the Cornell e-mail system. Our PureMessage filtering servers are currently being updated to address this problem, so you should soon begin to see a dramatic decrease in the number of these messages you receive.
    Please do not be alarmed if you are receiving these messages from addresses familiar to you or are receiving messages from “Mailer-Daemon” saying that you are sending out these messages. Most of these messages are being “spoofed,” meaning they are not really being sent from the e-mail address in the “From” line.
    If you continue to receive many of these messages on Thursday or Friday of this week or have any other concerns, please contact us again by phone or replying to this email.
    Sincerely,

    Contact Center Consultant

  10. Elliott Back says:

    Awesome. Looks like someone is using a botnet to send out these messages…

  11. Matt says:

    Our school, the University of Central Florida also got hit. I was getting 30+ a day at some points, and its been going on for over a week now. I guess they just now figured it out when symantec updated their virus definitions, I guess they don’t really check their server logs.

  12. Cayse says:

    I just saw a message on my account stating that I sent it to others. Will I get it again?

  13. xomd kriv says:

    clpgoidbm fszyrou pmvwc jlgvhiqrn rofydtgbu atio wrfzimjas

Leave a Reply

Powered by WP Hashcash