Odd Activist Spam

Posted in Spam by Elliott Back on May 14th, 2005.

I’ve been getting spam with titles like:

“The Whore Lived Like a German”

and other german political messages, with links to:

http://service.spiegel.de/cache/international/0,1518,344374,00.html
translate.google.com/translate?sourceid=navclient&hl=en&u=http%3A%2F%2Fwww%2Eheise%2Ede%2Fnewsticker%2Fmeldung%2F59427
mommomtre@yahoo.com
To: private@cornell.edu
Date: Sun, 15 May 2005 01:44:20 GMT
Subject: [spam] Auf Streife durch den Berliner Wedding
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=”us-ascii”
X-PMX-Version: 4.6.1.107272, Antispam-Core: 4.6.1.106808, Antispam-Data: 2005.5.14.33
X-PMX-Version: 4.7.1.128075, Antispam-Engine: 2.0.3.0, Antispam-Data: 2005.5.14.34
X-Text-Classification: spam369

Lese selbst:
www.zdf.de/ZDFde/inhalt/7/0,1872,2222503,00.html

Ars Technica. The article is ironically titled, “Spam makes you free” …

This entry was posted on Saturday, May 14th, 2005 at 11:16 pm and is tagged with auf streife durch den berliner wedding, www zdf de, whore lived like, ars technica, libasoli, zdfde, google, text classification, pmx, spiegel, political messages, content transfer, antispam, 2f, 3a, content type, cornell, activist, civil rights, ascii. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback.

Add New Comment

Subscribe: This Thread

Go to: My Comments · Community Page

Sort thread by:

Viewing 13 Comments

Thanks. Your comment is awaiting approval by a moderator.

Do you already have an account? Log in and claim this comment.

Permalink

Admin

Remove Post

Block email

Block IP address

JWK 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

I got that exact same message.

It was almost scary, since it was so on-topic to what I was writing about on Trendyblog.

I get about 20 a day of those sorts of things...

reply edit reblog flag

http://www.trendyblog.com

Permalink

Admin

Remove Post

Block email

Block IP address

Oxen 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

Well, I guess I'm lucky. I haven't been getting the spam but people are hitting my blog cause I'm #4 when you do a search for "The Whore Lived Like a German" + spam.

reply edit reblog flag

http://www.theoxrant.blogspot.com/

Permalink

Admin

Remove Post

Block email

Block IP address

Joe 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

Looks like you're up to #3 on Google as I was searching for more info on these emails :)

reply edit reblog flag

Permalink

Admin

Remove Post

Block email

Block IP address

TJ 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

The emails seem to all come from the same server: 69.164.61.221. I filed complaints as most of our employees are recieving this SPAM.

reply edit reblog flag

Permalink

Admin

Remove Post

Block email

Block IP address

Kathy 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

Me too - I found this blog via a google search.
I've received 400 of these mails in 24 hours and haven't a clue why.
My website is a medical one, with nothing political whatsoever.

Am glad about the server information.

Kathy

reply edit reblog flag

Permalink

Admin

Remove Post

Block email

Block IP address

Claudia 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

Here's a short article about that Neonazi-Spam.

reply edit reblog flag

http://www.tiru.de

Permalink

Admin

Remove Post

Block email

Block IP address

Elliott Bäck 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

That article doesn't really tell me why its being sent, and I already know that I'm getting it... I wonder what the point is...

reply edit reblog flag

http://elliottback.com

Permalink

Admin

Remove Post

Block email

Block IP address

Richard 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

This Symantec site has all you need to know

http://securityresponse.symantec.com/avcenter/v...

Good Luck - I got hit too - RVD

reply edit reblog flag

Permalink

Admin

Remove Post

Block email

Block IP address

Anonymous 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

The form letter now being sent out by CIT:

Thank you for contacting the CIT Contact Center regarding the German spam messages you have been receiving. These messages are a new virus that is circulating through the Cornell e-mail system. Our PureMessage filtering servers are currently being updated to address this problem, so you should soon begin to see a dramatic decrease in the number of these messages you receive.
Please do not be alarmed if you are receiving these messages from addresses familiar to you or are receiving messages from "Mailer-Daemon" saying that you are sending out these messages. Most of these messages are being "spoofed," meaning they are not really being sent from the e-mail address in the "From" line.
If you continue to receive many of these messages on Thursday or Friday of this week or have any other concerns, please contact us again by phone or replying to this email.
Sincerely,

Contact Center Consultant

reply edit reblog flag

Permalink

Admin

Remove Post

Block email

Block IP address

Elliott Back 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

Awesome. Looks like someone is using a botnet to send out these messages...

reply edit reblog flag

http://elliottback.com/wp/

Permalink

Admin

Remove Post

Block email

Block IP address

Matt 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

Our school, the University of Central Florida also got hit. I was getting 30+ a day at some points, and its been going on for over a week now. I guess they just now figured it out when symantec updated their virus definitions, I guess they don't really check their server logs.

reply edit reblog flag

Permalink

Admin

Remove Post

Block email

Block IP address

Cayse 3 years ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

I just saw a message on my account stating that I sent it to others. Will I get it again?

reply edit reblog flag

Permalink

Admin

Remove Post

Block email

Block IP address

xomd kriv 1 year ago 1 point

Please login to rate.

Do you already have an account? Log in and claim this comment.

clpgoidbm fszyrou pmvwc jlgvhiqrn rofydtgbu atio wrfzimjas

reply edit reblog flag

http://www.olqvjifg.ecink.com

Add New Comment

Trackbacks

(Trackback URL)

close ()

status via twitter

recent comments (follow comments)

View Profile »

Powered by Disqus · Learn more

close Reblog this comment

Powered by Disqus · Learn more

blog comments powered by Disqus