Base64 Encoded Spam Message

For all users, who don't speak German!

Moderator: Forum-Team

Base64 Encoded Spam Message

Beitragvon HanSatan » 17. Mai 2009, 14:41

Hi Guys,

Since over a month I'm receiving new kind of spam with base64 encoded message instead of standard plain text (2-3 messages per day). Spamihilator can't get a rid of it. I tried spamword filter with (check into html tags) without luck, DCC doesnt work either.

Here is source of message (most of them got the same code (at least beggining)):

http://cdn.solidfiles.net/i/bCGY.jpg

UPDATE: my mistake its encoded image in PNG, any way to get a rid of it using spamihilator?
Benutzeravatar
HanSatan
Spam-Jäger
Spam-Jäger
 
Beiträge: 24
Registriert: 21. Feb 2009, 14:26
Wohnort: Poland

Re: Base64 Encoded Spam Message

Beitragvon Chactory » 17. Mai 2009, 23:29

Hi!

If I understand right, those spam-mails do contain an inline attachment only, in other words, a png graphic only? The Empty-Mail Filter from Bob Loeffler should be perfect for this purpose. You have to uncheck the second of the three settings in the filter options. We had a wave of spam with inline pictures a while ago, but in the meantime, I thought it had ended ...

Regards, Chactory
HilfeHelp «en»TippsAnbuva's FAQBob's FAQ «en»SpamwortlisteRegelfilterScreenshotsSSL/TLSSpami 1.6.0
Vostro 3450, Intel Core i5 2410M 2,3 GHz, 4 GB DDR3 SDRAM 1333 MHz, Windows 7 Pro 64 Bit SP1

Bild
Benutzeravatar
Chactory
Administrator
Administrator
 
Administration
Beta-Tester
Forum-Team
 
Beiträge: 9593
Registriert: 9. Jan 2004, 23:19
Wohnort: Kiel (D)

Re: Base64 Encoded Spam Message

Beitragvon HanSatan » 18. Mai 2009, 11:49

Hi Chactory, thanks for quick reply.

Unfortunately empty-mail filter doesn't do the thing. I'm already using it with those settings:

http://cdn.solidfiles.net/i/kf1w.jpg

But as I said it doesn't work against those spams ;(
Benutzeravatar
HanSatan
Spam-Jäger
Spam-Jäger
 
Beiträge: 24
Registriert: 21. Feb 2009, 14:26
Wohnort: Poland

Re: Base64 Encoded Spam Message

Beitragvon Chactory » 18. Mai 2009, 13:51

Hi,

yes, your settings are ok. :)
Would you like to send me such a mail (complete mail including header data)?

Chactory
HilfeHelp «en»TippsAnbuva's FAQBob's FAQ «en»SpamwortlisteRegelfilterScreenshotsSSL/TLSSpami 1.6.0
Vostro 3450, Intel Core i5 2410M 2,3 GHz, 4 GB DDR3 SDRAM 1333 MHz, Windows 7 Pro 64 Bit SP1

Bild
Benutzeravatar
Chactory
Administrator
Administrator
 
Administration
Beta-Tester
Forum-Team
 
Beiträge: 9593
Registriert: 9. Jan 2004, 23:19
Wohnort: Kiel (D)

Re: Base64 Encoded Spam Message

Beitragvon HanSatan » 18. Mai 2009, 16:16

Sure Bro, but I deleted all messages of that kind, as soon as I will receive next spam I will forward it to you.

Thx!
Benutzeravatar
HanSatan
Spam-Jäger
Spam-Jäger
 
Beiträge: 24
Registriert: 21. Feb 2009, 14:26
Wohnort: Poland

Re: Base64 Encoded Spam Message

Beitragvon Chactory » 18. Mai 2009, 21:52

Thank you, Bro! Chactory
HilfeHelp «en»TippsAnbuva's FAQBob's FAQ «en»SpamwortlisteRegelfilterScreenshotsSSL/TLSSpami 1.6.0
Vostro 3450, Intel Core i5 2410M 2,3 GHz, 4 GB DDR3 SDRAM 1333 MHz, Windows 7 Pro 64 Bit SP1

Bild
Benutzeravatar
Chactory
Administrator
Administrator
 
Administration
Beta-Tester
Forum-Team
 
Beiträge: 9593
Registriert: 9. Jan 2004, 23:19
Wohnort: Kiel (D)

Re: Base64 Encoded Spam Message

Beitragvon HanSatan » 19. Mai 2009, 17:26

mail sent
Benutzeravatar
HanSatan
Spam-Jäger
Spam-Jäger
 
Beiträge: 24
Registriert: 21. Feb 2009, 14:26
Wohnort: Poland

Re: Base64 Encoded Spam Message

Beitragvon Chactory » 20. Mai 2009, 07:29

(For other readers of this thread:
The Empty-Mail Filter couldn't catch this sort of spam, because
it has an inline attachment plus a normal attachment.
Chactory)
HilfeHelp «en»TippsAnbuva's FAQBob's FAQ «en»SpamwortlisteRegelfilterScreenshotsSSL/TLSSpami 1.6.0
Vostro 3450, Intel Core i5 2410M 2,3 GHz, 4 GB DDR3 SDRAM 1333 MHz, Windows 7 Pro 64 Bit SP1

Bild
Benutzeravatar
Chactory
Administrator
Administrator
 
Administration
Beta-Tester
Forum-Team
 
Beiträge: 9593
Registriert: 9. Jan 2004, 23:19
Wohnort: Kiel (D)

Re: Base64 Encoded Spam Message

Beitragvon HanSatan » 20. Mai 2009, 13:18

Indeed so there is no way to get a rid of it ;-)
Benutzeravatar
HanSatan
Spam-Jäger
Spam-Jäger
 
Beiträge: 24
Registriert: 21. Feb 2009, 14:26
Wohnort: Poland

Re: Base64 Encoded Spam Message

Beitragvon dme » 20. Mai 2009, 16:27

If you like to use the IMP-Filter

http://www.texttransformer.org/Spamfilter_en.html

I can help you, to make a project against this aggressor.
Benutzeravatar
dme
Spam-Terminator
Spam-Terminator
 
Beiträge: 71
Registriert: 28. Dez 2008, 23:45

Re: Base64 Encoded Spam Message

Beitragvon HanSatan » 20. Mai 2009, 16:49

That would be nice, but I think it takes some time and I don't have free time nowadays, but thanks for offering help. Btw I see that IMP is pretty good I think I will use it some day.
Benutzeravatar
HanSatan
Spam-Jäger
Spam-Jäger
 
Beiträge: 24
Registriert: 21. Feb 2009, 14:26
Wohnort: Poland

Re: Base64 Encoded Spam Message

Beitragvon dme » 20. Mai 2009, 17:02

The only thing, that you would have to do is to tell me, what these mails specifically have in common or to provide me with some examples. Base64 encoding is not specific, but perhaps the subject. If there is a criterion, I can make such a project for you very quickly.
Benutzeravatar
dme
Spam-Terminator
Spam-Terminator
 
Beiträge: 71
Registriert: 28. Dez 2008, 23:45

Re: Base64 Encoded Spam Message

Beitragvon HanSatan » 20. Mai 2009, 18:26

I see, thank you for kind offer. I will try to gather few examples of such e-mails and forward them to you.

Stay tuned :D
Benutzeravatar
HanSatan
Spam-Jäger
Spam-Jäger
 
Beiträge: 24
Registriert: 21. Feb 2009, 14:26
Wohnort: Poland

Re: Base64 Encoded Spam Message

Beitragvon Gast » 29. Mai 2009, 09:27

Hello Friends!

I have the same problem... I get dozens of email, with a subject of RE: or FW: and then just the Base64-encoded inline picture. I will post a sample in the next post. If anyone can help it would be great.

Also, I need to truly congratulate the great people who make this possible!

Thanks,

Luca
Gast
 

Re: Base64 Encoded Spam Message

Beitragvon Gast » 29. Mai 2009, 09:32

Sorry... I can't post the message because it gets flagged as spam by the forum and the post is rejected... if anyone is interested please do let me know and I'll provide it in a different way.

Thanks,

Luca
Gast
 

Nächste

Zurück zu English Forum

Wer ist online?

Mitglieder in diesem Forum: 0 Mitglieder und 5 Gäste

 industrious-southeast