Thursday, November 16, 2006

Yet more spammer image optimization; this time it's pretty

These something new in the image-spam wave: pretty colours! This spammer is working hard to randomize his images and avoid OCR. Here's a sample:



And to give you an idea of the randomization here's another:



Thanks to Nick FitzGerald and Sorin Mustaca for samples. Notice how the letters are misaligned both vertically and horizontally to try to avoid OCR, and the background polygons are randomized. Also the aspect ratio and size of the messages have been changed for each image.

1 comment:

Anonymous said...

Now they are posting this crap:

Return-Path: < ttgoimue @ outlettools.com >
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from dua58.internetdsl.tpnet.pl (ip10.interq.pl [213.76.135.10])
by localhost (Postfix) with ESMTP id E177FA23CC05
for < me @ localhost >; Fri, 17 Nov 2006 16:38:09 +0100 (CET)
From: "song Linesquot" < ttgoimue @ outlettools.com >
To: [email protected]
Subject: smokes nego philly
Date: Fri, 17 Nov 2006 16:38:11 +0100
Message-ID: < xxx @ yyy >
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-2"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.6626
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962

15387358535238560 755372760277 55857682315583 028174 74848820252 55202212841433
84662524653688135 68546443787324 7126205248871645 30041108 83647686711703 810047324420013
03386 44751 20258 1384 4082 6757641475 68774 12663 0037 3653
71072 30327 46643 0264 6734 7784 4822 00415 36444 4018 0313
84118 71551 45378 6633551637118483 3767 7458 10588 64842 20264825123186
12366 31221 74650 05846146875851 826651 05211 50126 36543 127482773717882
26252 01310 80081 881508537240 168460125817862 54614 84864 0622 3583
36572 55608 31350 1257 0406 2737234764451043 10580 73415 3581 151
56676 32535 33217 2560 28658 48271 1236 52826 50508 31632 6132 5253
32782 28041615146325 4781 6822 48522 8641 26510 10073148884806 802502876385402
32346 805544351641 4102 8000 51203 7324 68382 876748017021 70065312554724
Thats TORA.OB