Spammers Love Opera
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Wed Jul 02 18:13:40 2008
X-Account-Key: account3
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: x
Delivered-To: 119-x
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
tucker.host4africa.com
X-Spam-Level: ***
X-Spam-Status: No, score=3.4 required=7.0 tests=HELO_DYNAMIC_IPADDR
autolearn=no version=3.1.0
Received: (qmail 7244 invoked from network); 2 Jul 2008 01:41:35 +0200
Received: from koln-4d0b14d7.pool.mediaways.net (77.11.20.215)
by tucker.host4africa.com with SMTP; 2 Jul 2008 01:41:34 +0200
To: x
Subject: Master the art of deception
From: Kiran x
Content-Type: text/plain; format=flowed; delsp=yes; charset=koi8-r
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Date: Wed, 2 Jul 2008 01:41:24 +0200
Message-ID: <x@df7bu5qhhwunroj>
User-Agent: Opera Mail/9.50 (Win32)
X-Account-Key: account3
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: x
Delivered-To: 119-x
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
tucker.host4africa.com
X-Spam-Level: ***
X-Spam-Status: No, score=3.4 required=7.0 tests=HELO_DYNAMIC_IPADDR
autolearn=no version=3.1.0
Received: (qmail 7244 invoked from network); 2 Jul 2008 01:41:35 +0200
Received: from koln-4d0b14d7.pool.mediaways.net (77.11.20.215)
by tucker.host4africa.com with SMTP; 2 Jul 2008 01:41:34 +0200
To: x
Subject: Master the art of deception
From: Kiran x
Content-Type: text/plain; format=flowed; delsp=yes; charset=koi8-r
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Date: Wed, 2 Jul 2008 01:41:24 +0200
Message-ID: <x@df7bu5qhhwunroj>
User-Agent: Opera Mail/9.50 (Win32)
Body:
Pick up some new habits
[URL DELETED]
--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
[URL DELETED]
--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
Comments:
Spammers are probably using this technique to get their messages past the spam filters. The text at the bottom of the e-mail is the default signature of Opera's e-mail client. If you receive and allow e-mails from friends using Opera's e-mail client with its default signature, your spam filter will probably be trained to allow e-mails containing this signature. Spammers are bargaining on this and that is most likely the reason why they are adding this signature to all their spam.
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Canadian Pharmacy Spam - Worlds best pain killers hereQuit smoking spam - The most effective anti-smoking method
Drugstore Pharmacy Spam - Are generics as good?
Online Pharmaceutical Spam with Policy Restricitions Being Lifted
Online Pharmacy Spam - Same meds but much cheaper
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
