On Fri, 21 Aug 2020, Matus UHLAR - fantomas wrote:

On 20.08.20 09:13, Loren Wilton wrote:
I've started receiving a bunch of spam or more likely phish mails that contain the following sort of trash in large quantities between almost every word of the visible text. The invisible font rules don't seem to catch this.

 <span style=3D"font-size: 0vw;">lzdtec</span>

On Fri, 21 Aug 2020, Matus UHLAR - fantomas wrote:
I have noticed those some time ago.
I wonder what's the point of sending such mail.

On 21.08.20 09:21, John Hardin wrote:
It's an attempt to obstruct spam detection via naïve text matching in the raw HTML. It has no effect (beyond being a fairly good spam indicator) if the text is rendered before being scanned.

that would make sense if it contained any non-dummy text

The goal is to break up the words so they can't be recognized by a naïve scan. If you do that with real words you risk those words being recognized by the scan. That's why the word obfuscation uses gibberish.


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org                         pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  At what point then is the approach of danger to be expected?
  I answer, if it ever reach us, it must spring up amongst us.
  It cannot come from abroad. If destruction be our lot, we must
  ourselves be its author and finisher. As a nation of freemen, we
  must live through all time, or die by suicide.   -- Abraham Lincoln
  ...popularly summarized as:
  "America will never be destroyed from the outside. If we falter
  and lose our freedoms, it will be because we destroyed ourselves."
-----------------------------------------------------------------------
 3 days until the 1941st anniversary of the destruction of Pompeii

Reply via email to