By admin, on June 9th, 2010%
Highlighting the sophistication of JavaScript obfuscation in spam email
Earlier today we noticed this rather unusual attack email in one of our catch-all email honeypots after making it through Gmail’s infamously strong “award winning spam and virus filtering”. For anyone wondering, this is the same honeypot from the last story, which continues to receive about 600,000 spam emails a month. This one stood out from a field of 300 other mails that made it to the inbox:
Dear Customer,
This e-mail was send by [domain].com to notify you that we have temporanly prevented access to your account.
We have reasons to beleive that your account may have been accessed by someone else. Please run attached file and Follow instructions.
(C) [domain].com
We had our own reasons to “beleive” otherwise. Attached was an HTML file appropriately named “open.html”. Opening it in notepad revealed obfuscated JavaScript:
Continue reading A Most Unusual Attachment
By admin, on August 31st, 2008%
Gmail, officially Google Mail in Germany and the United Kingdom, is a free web-based (webmail), POP3 and IMAP e-mail service provided by Google. Gmail is available to individuals with Google accounts, who receive “their.username@gmail.com”, but can also be configured to handle mails for an organization that already has their own domain name.
Google claims that Gmail includes “award-winning spam and virus filtering”. Brad Taylor, “spam tsar” at Google, stated:
“When [Gmail] launched 25% of e-mail was spam. We caught a lot of that. Over time it’s grown and grown and currently around 75% of all e-mail is spam and so our job has got a lot harder.”
Brad Taylor can also be seen in this cheeky ephemeral film explaining how the Gmail spam filter works.
Continue reading Stress testing the Gmail spam filter
Latest Comments