Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Security Response

Showing posts tagged with Endpoint Protection (AntiVirus) remove filter
Showing posts by Robert Vivas remove filter
Robert Vivas | 24 Aug 2009 | 0 comments

Spammers continue to take advantage of the Internet tools and applications Google provides for free. In the past we have encountered spammers abusing Google Group Pages, Google Maps, Google Search, and Google Docs to host spam content. Recently spammers have started using Google Translate. Google Translate is an excellent tool that enables users to translate any text, Web page, or document, and convert the native text to the specified language requested.

With recent medication spam offer attacks, spammers have discovered a way to exploit the use of Google Translate. Here is one example:

  1. Hijacked URL directory space from a legit domain. In this example they used www.ipanel.tv with the directory path www.ipanel.tv/images/news/news.htm to use as a redirect to host the intended spam domain...
Robert Vivas | 26 Jun 2009 | 0 comments

The spammers of enhancement medication have recently revitalized the use of obfuscated image attachments and are therefore reemerging as a top threat to email users. By using .jpg-formatted image attachments, these spammers are trying every trick in the book to bypass spam filters, including randomizing the subject lines with misspelled sexually suggestive catch phrases, using minimal message body content, and closing with obfuscated attached images.

Here are some examples of the kinds of message body content that has been observed:

 

•    Canadiian policce ads pulled from gang Web sites
•    Chocoholic squtirrel steals treatts from Finnish shop
•    Perpetual Student Wants Onnne More Year
•    The animal that stows its tongue inn its rib cage
•    New Orleans R&B star begins posthumous mayoral bid

The...

Robert Vivas | 13 May 2009 | 0 comments

Last week we blogged about Japanese adult dating spam. Another often-seen spam type in the Japanese language is the “make money fast” (MMF) offer. The following are some common MMF subject lines:

 

1.    Work at home business
2.    SOHO – Small Office Home Office
3.    Make Money Without Doing Anything

With this type of message, we have observed that spammers rely heavily on third-party mailers to distribute their email. The main reason why these spammers are using third-party mailers is to try and bypass anti-spam filtering. Spammers do so by utilizing shortened URL services to redirect end-users to their actual site. By using shortened URL sites, spammers can mask their actual URL domain in the message, thereby hoping to not be detected and/or blocked by anti-spam vendors. Below are a couple of examples:

 

Example 1:...