Security Incidents mailing list archives

Re: Strange hidden messages in email


From: Matt Beland <matt () rearviewmirror org>
Date: Fri, 26 Apr 2002 10:41:49 -0700

On Fri, Apr 26, 2002 at 12:38:39PM -0400, Jim Cockerham wrote:
Hello,
I have been receiving strange emails for a few weeks from a domain in
Korea. The return addresses are always fake msn or yahoo accounts but if
I view the source they always come from a domain in Korea. Usually they
are a very generic advertisement but if you view the source of the
message they have hidden messages in them. The first one had "Mary had a
little lamb" hidden all throughout the message, but others have different
messages hidden in the source. They are usually addressed to my email
account with several other CC: addresses . I don't know if there is any
reason for concern . Below is a copy of the source from one of the messages
, The actual message viewable in Outlook express was just a simple
link.................

Just spam, ignore or filter it. The comments in the HTML source are an attempt
to prevent heuristic filters from blocking the Spam.

-- 
Matt Beland
matt () rearviewmirror org
http://www.rearviewmirror.org

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: