New Spam Stunt

[Owen Densmore]

I've been receiving a new flood of spam with an interesting  
signature.  It has a usual unsubscribe message:
   To not recieve anymore. Please visit this link.
   223 W Bulldog Blvd #551 Provo, UT 84604

But I was surprised Postini did not mark it as trash.  After a bit of  
research, I found two interesting attributes of all the spam:

1 - The unsubscribe message above was not text, but was an image.  It  
was also to a different URL each time.

2 - A somewhat weird header was used, apparently to out-fox spam  
filters:
     X-Spamshield-Status-Data: Skipped, authenticated user

.. so to knock it out until Postini gets hip, I just added the latter  
header to my mail client's filter, moving it to the spam folder.

I'd be interested if anyone else receives these.

     -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

[dstrn88]

Hi Owen -

I have been getting this as well, but I don't know how this spammer pick up my work email. Do you know what site started this. I also think that there is another similar stunt happening with the below address:

492-C Ceder Lane #302
Teaneck, NJ 07666


Any ideas what should I tell my email support team to stop the spam. Sorry if this is too much to ask, but I though I would ask. Thanks for your time.

Stacy

Owen Densmore wrote

I've been receiving a new flood of spam with an interesting  
signature.  It has a usual unsubscribe message:
   To not recieve anymore. Please visit this link.
   223 W Bulldog Blvd #551 Provo, UT 84604

But I was surprised Postini did not mark it as trash.  After a bit of  
research, I found two interesting attributes of all the spam:

1 - The unsubscribe message above was not text, but was an image.  It  
was also to a different URL each time.

2 - A somewhat weird header was used, apparently to out-fox spam  
filters:
     X-Spamshield-Status-Data: Skipped, authenticated user

.. so to knock it out until Postini gets hip, I just added the latter  
header to my mail client's filter, moving it to the spam folder.

I'd be interested if anyone else receives these.

     -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org