... and it also means that OCR based spam filtering is succesful enough
for the spammers to adopt CAPTCHA-style text-obfuscation-in-images as an
evasion method.


Andrew.
 

-----Original Message-----
From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf Of Pete McNeil
Sent: Wednesday, June 11, 2008 8:18 AM
To: Message Sniffer Community
Subject: [sniffer] Re: Spam no using CAPTCHA!


Hello Daniel,

Wednesday, June 11, 2008, 9:19:47 AM, you wrote:

> Hi Everyone,

> I just sent a spam sample to Message Sniffer, that was using CAPTCHA,
it
> said CIALIS in the CAPTCHA. I'm curios to see what Pete thinks of this
new
> tactic?

On first look it is simply another way to use an obfuscated image to
deliver their message and should be handled the same way. Use of
CAPTCHA software to create this obfuscated image is an interesting
choice -- it means people making good OCR resistant CAPTCHA generators
are now unintentionally helping the blackhats defeat OCR based spam
filtering.

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to