Seen: Spam using an INPUT tag, type=image, instead of an IMG tag. There is
no form tag, so clicking does nothing, but the image loads to screen. Below
is the complete body of a sample (included here since it is very short).

The string after id= varies per sample. I munged it here to 'aaaa'.

The image is a picture of text written in Chinese.

Joseph Brennan
Columbia University Information Technology



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.23181"></HEAD>
<BODY><INPUT id=aaaa border=0 src="http://img04.taobaocdn.com/imgextra/i4/167488816/T2tRdHXgXMXXXXXXXX_!!167488816.gif"; type=image>
</BODY></HTML>



Reply via email to