Spam in images

David Relson relson at osagesoftware.com
Mon Aug 7 14:41:01 CEST 2006


On Sun, 06 Aug 2006 23:50:56 -0400
Thomas Anderson wrote:

> On Sat, 2006-08-05 at 18:45 -0700, Bill Wohler wrote:
> > These spams don't have a single URL in them, so I suppose
> > stripsearch wouldn't help.
> > 
> > Or can stripsearch read the URLs in the GIF?
> 
> No, character recognition in graphics would take forever to do well.
> Are you telling me that there's nothing to click on in the email?  The
> image itself isn't a clickable link?  I find that hard to believe.  It
> can't be a very effective spam then.
> 
> Tom

I've been seeing 2 distinct varieties of image spam recently.  

#1 contains image001.gif, a slew on innocuous words, and is 28Kb
to 29Kb long.  

#2 contains p.jpg and a bit of html, and is 26Kb long. 

#3 contains multiple images (each containing a line or so of the message)
and is approx 80Kb long.

FWIW, bogofilter has had no trouble with #2 and #3 and training is
helping with #1.

Regards,

David



More information about the Bogofilter mailing list