Search 
You are here: Articles   
ArticlesMinimize
Using bounce back messages to send spam
Posted by Walleye on Monday, April 03, 2006 :: Last Updated on Monday, January 01, 2007:: Views 2754

   

I have noticed a great increase of bounced messages with spam attached... how sneaky are these guys getting. Sad that many are having to turn off bouncing to combat spam.

I have notice a great increase of bounced messages with spam attached... how sneaky are these guys getting. Sad that many are having to turn off bouncing to combat spam.

http://www.net4now.com/isp_news/news_article.asp?News_ID=3509


SoftScan announced today that in a bid to beat detection and increase the likelihood of their messages being read, spammers are increasingly using a new twist on joe-jobbing (forging the sender’s email address) that may lead to organisations abolishing the bounce back message.

“The change in tactic demonstrates that spammers are having an increasingly hard time getting through anti-spam technologies and persuading users to open up their emails and at least read them,” comments Bo Engelbrechtsen, corporate communications manger of SoftScan.


Instead of forging the sender’s email address, which is easily detected by anti-spam technologies, and sending it directly to the target company; spammers are deliberately sending their messages to an email address they know does not exist at high profile company with the “from” email address of the target company.

The email is then bounced as an unrecognised email address and sent back to the “sender”. Since the IP address and the email domain address now match, the email isn’t picked up by anti-spam technology and the email, complete with the spammer’s original and intended message is passed to the end user.
Spammers are now relying on the fact that users are more likely to open and the read the bounce back because it has come from a legitimate source.

Bo Engelbrechtsen continues, “No respectable company wants to see its domain name linked to spam. Although bounce back messages are helpful in letting senders know whether or not their message reached the recipient, in order to stop the abuse of their domain name many companies are already starting to turn off their bounce back messages.”

Previous Page | Next Page

COMMENTS


DonationsMinimize

Find our site useful? Make a donation to show your support

Donate

logo_ccMC.giflogo_ccVisa.giflogo_ccDiscover.giflogo_ccAmex.gif

ArGoStuff Supporters

 


News from ArGoSoftMinimize
1 2 3 4 5 6


Mail Server v1.0.8.3
  • Added support of STARTTLS (STLS) command for SMTP, POP3, IMAP, and SMTP relay and delivery, which will allow secure, fully encrypted connections, when possible;
11/6/2011 1:10:34 PM
Mail Server v1.0.8.2
  • Optimized delivery speed. In earlier versions each "tick" which was checking whether messages were in the outbox queue, was picking up only one message at a time. Now it will attempt to pick MaximumAllowedThreads-ActiveDelivery threads messages, which should considerably increase deliver speed;
  • Optimized SEARCH and STATUS IMAP commands. They appear to be used very extensively by Android, and (not that extensively, but still) by iPhone. Now users who use mobile phones to access their IMAP accounts will see considerable improvement;
  • Optimized STORE IMAP command. Before storing of IMAP flags was occuring one message at a time, which seemed to be fine with SQL server, but proved to be slow for SQLite... Now it happens with single SQL call.
10/8/2011 7:59:35 PM
ArGoSoft Mail Server v1.0.8.1
  • Fixed a bug: when using IMAP via Firefox with "When I delete a message, move it to Trash folder" option, marking messages in the trash folder was causing high CPU usage, and was taking some time, making the server pretty much non-responsive. The problem was happening only when using SQLite.
6/6/2011 9:33:36 PM
ArGoSoft Mail Server v1.0.8.0
  • Fixed a problem with web interface - was showing only first page of messages, and would not switch to other pages; In order to fix the web interface, mail server itself has to be updated;
  • When installint initially, was still using SQLite, even when SQL was requested;
  • There was a problem with switching from SQLite database engine to SQL server database engine: the SQL database was not being created;
5/23/2011 5:53:55 PM
ArGoSoft Mail Server .NET v1.0.7.9
  • The server no longer requires Microsoft SQL Server. If SQL server is not found, it will use SQLite engine, which does not require separate installation. If SQL server is found, then user will be prompted whether he wants to use it;
  • Made other improvements, such as, now mailbox rebuild indexes orphaned records, rather then deleting them, also added an opotion to increment UIDL validity of folder (both on the Mailbox viewer box);
  • Made minor improvements on web interface;
4/26/2011 9:47:25 PM


1 2 3 4 5 6

Get PayPal


Home:ArGoStuff:Forums:Articles:Cyber Security Tips:FAQ:Downloads:Links
Copyright 2006-2011 by ArGoStuff Terms Of UsePrivacy Statement