Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > other security issues & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old April 16th, 2006, 02:15 PM
Devinco's Avatar
Devinco Devinco is offline
Very Frequent Poster
 
Join Date: Jul 2004
Posts: 2,524
Question Why do some spams contain meaningless combinations of words?

The reason spammers send out spam is in the hope of making money. So they hire a spambot network of zombie computers to send out millions of spam emails.
But then why waste the time sending out emails with unintelligible paragraphs of words that appear to be put together randomly?
They will certainly not be able to sell anything that way.
Are they sent to confuse Bayesian spam filters?
What's the point?
If this question has been answered already, please point me in the right direction.
  #2  
Old April 16th, 2006, 02:40 PM
WSFuser WSFuser is offline
Incredibly Massive Poster
 
Join Date: Oct 2004
Location: California, USA
Posts: 10,323
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by Devinco
Are they sent to confuse Bayesian spam filters?
u hit teh bull's eye!

Quote:
In response to the growing problem of spam e-mail, filtering tools became available starting around 2002 which implemented a widely employed method known as the naive Bayes classifier. This method uses the probability of various words appearing in spam emails to automatically classify them as spam. For a short time, this worked fairly well to classify emails as probable spam. In response, spammers developed word salad to fool programs employing this method of classification. By adding large amounts of random text somewhere in their message, spammers hope to confuse Bayesian classifiers into classifying the message as "ham e-mail" (non-spam e-mail). Typically, this text contains random words from a dictionary.

wikipedia link
__________________
  #3  
Old April 16th, 2006, 03:05 PM
Devinco's Avatar
Devinco Devinco is offline
Very Frequent Poster
 
Join Date: Jul 2004
Posts: 2,524
Question Re: Why do some spams contain meaningless combinations of words?

Thanks WSFuser.

That makes sense.
Many of the spams do combine the word salad paragraphs with the sales pitch.

But I still don't understand something.
Some of the spam has only word salad paragraphs, no sales pitch, no link, just jibberish. If this word salad only email gets past the Bayesian filters, how do the spammers benefit? They could have sent me the combined word salad/sales pitch spam just as well.
  #4  
Old April 16th, 2006, 03:11 PM
WSFuser WSFuser is offline
Incredibly Massive Poster
 
Join Date: Oct 2004
Location: California, USA
Posts: 10,323
Default Re: Why do some spams contain meaningless combinations of words?

rele i dont know how spammers benefit. without misspellings, spam wont get through. but with them, teh spam has little hope of getting customers.

the only thing i know is that spam is annoying and must be deleted whether its bogus or clear concise advertising.
__________________
  #5  
Old April 16th, 2006, 03:48 PM
Devinco's Avatar
Devinco Devinco is offline
Very Frequent Poster
 
Join Date: Jul 2004
Posts: 2,524
Default Re: Why do some spams contain meaningless combinations of words?

Only thing I could think of is that they are using the word salad only spams to somehow test if they are being delivered. Since the reply addresses are almost always false, they wouldn't know if the email bounced or not. But these spams usually have a gif attachment (probably a web bug) and another attachment named something like Part 1.2. Maybe they are tracking the delivery then if the web bug is activated, they send me the combined word salad spamvertisement.
Just a guess though.

Thanks WSFuser.

Ready.....Aim.......Delete!!!
  #6  
Old April 16th, 2006, 04:51 PM
ErikAlbert ErikAlbert is offline
Incredibly Massive Poster
 
Join Date: Jun 2005
Posts: 9,456
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by Devinco
Ready.....Aim.......Delete!!!
That's the final cure for every spam-email. If there was a "nuclear delete", I would use that one.
__________________
ErikAlbert
Security = WinXPproSP3 Firewall + Anti-Executable + DefenseWall HIPS * Recovery = ShadowProtect + FirstDefense-ISR
Malware Survival Rate = 0.00%, but each malware has my sympathy.
  #7  
Old April 16th, 2006, 05:40 PM
Eldar's Avatar
Eldar Eldar is offline
Very Frequent Poster
 
Join Date: Jul 2004
Location: Vilvoorde (Belgium)
Posts: 2,126
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by Devinco
Only thing I could think of is that they are using the word salad only spams to somehow test if they are being delivered.
My guess it's done to throw off ISP's spam filters and not for the one receiving the message.
__________________
Brabantse leeuw | Eendracht maakt macht
Vista HP SP1 | KIS 2009 | Malware Defender | SUPERAntiSpyware
Opera & Firefox | Barca Pro | Sandboxie | FirstDefense-ISR | ShadowProtect
Rogue/Suspect Anti-Spyware Products & Web Sites
  #8  
Old April 16th, 2006, 06:22 PM
bigbuck's Avatar
bigbuck bigbuck is offline
Massive Poster
 
Join Date: Jul 2004
Location: Qld, Aus
Posts: 4,877
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by Devinco
Only thing I could think of is that they are using the word salad only spams to somehow test if they are being delivered. Since the reply addresses are almost always false, they wouldn't know if the email bounced or not. But these spams usually have a gif attachment (probably a web bug) and another attachment named something like Part 1.2. Maybe they are tracking the delivery then if the web bug is activated, they send me the combined word salad spamvertisement.
Just a guess though.

Thanks WSFuser.

Ready.....Aim.......Delete!!!
I find, in the few occasional spams that slip through my ISP's filter, that the email is actually an image embedded in the email. A large clickable link in fact...even though it may appear to be a 'letter from a bank' or similar. If you are viewing your emails in 'plain text' then you are actually viewing an 'alternative text' message....which is usually the gibberish that you mention. I suppose it's to confuse 'filters' and 'message rules' where specific words are excluded.
__________________
Hard work never hurt anyone......but why take the chance!
  #9  
Old April 16th, 2006, 06:32 PM
bigbuck's Avatar
bigbuck bigbuck is offline
Massive Poster
 
Join Date: Jul 2004
Location: Qld, Aus
Posts: 4,877
Default Re: Why do some spams contain meaningless combinations of words?

Here's one.
The 'hand pointer' didn't show up in my screenie....but it is one big clicky link.
Attached Images
 
__________________
Hard work never hurt anyone......but why take the chance!
  #10  
Old April 16th, 2006, 06:34 PM
bigbuck's Avatar
bigbuck bigbuck is offline
Massive Poster
 
Join Date: Jul 2004
Location: Qld, Aus
Posts: 4,877
Default Re: Why do some spams contain meaningless combinations of words?

...and here's the 'plain text' gibberish behind it.
Attached Images
 
__________________
Hard work never hurt anyone......but why take the chance!
  #11  
Old April 17th, 2006, 12:28 AM
Longboard's Avatar
Longboard Longboard is offline
Massive Poster
 
Join Date: Oct 2004
Location: Sydney, Australia
Posts: 3,096
Default Re: Why do some spams contain meaningless combinations of words?

Yes
Sophisticated phishing techniques to the uncertain,
One careless click and oops!

Set your mail to Text only send and receive, is I believe, a useful security measure.
Anyone who trys to send you non-text only mails is not your friend.
__________________
Don't confuse me with someone who actually knows what they are talking about.
Linux Registered user 469135
Please, support Medecins Sans Frontieres
  #12  
Old April 17th, 2006, 04:12 AM
Longboard's Avatar
Longboard Longboard is offline
Massive Poster
 
Join Date: Oct 2004
Location: Sydney, Australia
Posts: 3,096
Default Re: Why do some spams contain meaningless combinations of words?

@BB

Heh
You part of a bot net?
I just got 2 of those swiss invest e-mails

Aren't spammers just a pain in the arse.
__________________
Don't confuse me with someone who actually knows what they are talking about.
Linux Registered user 469135
Please, support Medecins Sans Frontieres
  #13  
Old April 17th, 2006, 04:59 AM
bigbuck's Avatar
bigbuck bigbuck is offline
Massive Poster
 
Join Date: Jul 2004
Location: Qld, Aus
Posts: 4,877
Default Re: Why do some spams contain meaningless combinations of words?

Yeah, I've had the same one a couple of times. Seems to slip through B'pond filters....
__________________
Hard work never hurt anyone......but why take the chance!
  #14  
Old April 17th, 2006, 07:34 PM
Devinco's Avatar
Devinco Devinco is offline
Very Frequent Poster
 
Join Date: Jul 2004
Posts: 2,524
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by Eldar
My guess it's done to throw off ISP's spam filters and not for the one receiving the message.
Thanks Eldar.
  #15  
Old April 17th, 2006, 07:37 PM
Devinco's Avatar
Devinco Devinco is offline
Very Frequent Poster
 
Join Date: Jul 2004
Posts: 2,524
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by bigbuck
I find, in the few occasional spams that slip through my ISP's filter, that the email is actually an image embedded in the email. A large clickable link in fact...even though it may appear to be a 'letter from a bank' or similar. If you are viewing your emails in 'plain text' then you are actually viewing an 'alternative text' message....which is usually the gibberish that you mention. I suppose it's to confuse 'filters' and 'message rules' where specific words are excluded.
Big Buck, Thanks. That's a sneaky trick they use to slip by.
  #16  
Old April 17th, 2006, 07:39 PM
Devinco's Avatar
Devinco Devinco is offline
Very Frequent Poster
 
Join Date: Jul 2004
Posts: 2,524
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by Longboard
Yes
Sophisticated phishing techniques to the uncertain,
One careless click and oops!

Set your mail to Text only send and receive, is I believe, a useful security measure.
Anyone who trys to send you non-text only mails is not your friend.
Hi Longboard,

I've been using plain text only email for a while now and my filters have been working pretty well, but lately more spam is getting through.

Last edited by Devinco : April 17th, 2006 at 08:25 PM.
  #17  
Old April 18th, 2006, 04:11 AM
Longboard's Avatar
Longboard Longboard is offline
Massive Poster
 
Join Date: Oct 2004
Location: Sydney, Australia
Posts: 3,096
Default Re: Why do some spams contain meaningless combinations of words?

@Devinco

Yeah, same prob here.
I use NIS and the filters pick up the spam but that leaves me with about 5 or so spams in the "antispam" box each day.

Got much worse lately. Not sure why.
I used to get <5/wk.

Sounds like BB uses the web based mail.
I hardly ever check my web address: God knows whats in there.
At least if its full everything gets bounced I suppose.

It makes me laugh the way any kind of paperwork now asks for e-mail addy.
Whenever I refuse to supply same or other , to my mind, invasive of privacy details, I always get the strangest looks.

MOST PEOPLE STILL DONT REALISE WHAT THEY ARE GIVING OUT.

I,m sure most users here are very aware of their privacy, but I suspect many people just give out all their details.

Just have a look at what details even low level commercial transactions are requiring: the other day I joined up with a new video shop; they wanted:
Passport
Drivers License
e-mail
home phone
credit card

and planned to put all this on their database!!!

I was gobsmacked that they thought they could take all that.

It seems all databases are suspect or perhaps even worse for sale.

One of our national dailies has just run a little piece on privacy and imminent loss of same.
http://smh.com.au/news/technology/ey...126035051.html

Somewhere somehow there has to be a line in the sand.

Regards.
__________________
Don't confuse me with someone who actually knows what they are talking about.
Linux Registered user 469135
Please, support Medecins Sans Frontieres
  #18  
Old April 18th, 2006, 08:09 AM
bigbuck's Avatar
bigbuck bigbuck is offline
Massive Poster
 
Join Date: Jul 2004
Location: Qld, Aus
Posts: 4,877
Default Re: Why do some spams contain meaningless combinations of words?

Quote:
Originally Posted by LB
Sounds like BB uses the web based mail.
I hardly ever check my web address: God knows whats in there.
At least if its full everything gets bounced I suppose.
Actually that one was from my main POP3. My ISP is suposed to filter out the spam though. Also use Gmail for disposables...
__________________
Hard work never hurt anyone......but why take the chance!
  #19  
Old April 18th, 2006, 08:47 AM
Longboard's Avatar
Longboard Longboard is offline
Massive Poster
 
Join Date: Oct 2004
Location: Sydney, Australia
Posts: 3,096
Default Re: Why do some spams contain meaningless combinations of words?

@BB
OK.
Yeah, me too; straight out POP3 address with Littlepuddle.
I have carry over addy from dial up days, so also have web/server address which I have never used.

I,m not sure I even knew Bigpond filtered my mail?

Is there a specific site for Bigpond to alert them of spam?

regards.
__________________
Don't confuse me with someone who actually knows what they are talking about.
Linux Registered user 469135
Please, support Medecins Sans Frontieres
  #20  
Old April 19th, 2006, 09:02 PM
bigbuck's Avatar
bigbuck bigbuck is offline
Massive Poster
 
Join Date: Jul 2004
Location: Qld, Aus
Posts: 4,877
Default Re: Why do some spams contain meaningless combinations of words?

Log into their webmail and find 'contact us'??
__________________
Hard work never hurt anyone......but why take the chance!
 

Wilders Security Forums > Other Security Topics > other security issues & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 11:59 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums