Re: Re: Automated mass abuse of form mailers

----Original Message----
>From: Aditya Deshmukh
>Message-Id:
!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQA
AAAObbFSKrQek2M9ZEfGt0ItwEAAAAA_at_online.gateway.strangled.net

>>> Another address they use is bergkoch8_at_aol.com
>>> (noticed aol abuse about this, but I guess that's /dev/null)
>>
>> I'm going to start putting both those addresses into all
>> the unsubscribe
>> links I get in all my spam... >:->
>>
>
> This might be someones' 0wned email address.
>

  It _might_ be, but it's far more likely that they're using it as a dropbox
to test whether their spam is getting through and which scripts are
vulnerable, given the pattern of usage described by the OP.

    cheers,
      DaveK

-- 
Can't think of a witty .sigline today....
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/