Andrew,

What is actually happening is the spamware is configured to get its message from a script that runs on a remote Apache server, probably like a screen scrape.  Clearly they don't have good redundancy :)  I would imagine that this is an owned server sitting somewhere instead of another zombie.

Matt



Colbeck, Andrew wrote:
I hadn't made that connection.

I saw very few of those, but maybe a more dedicated search will turn up
more.

When I saw those broken Apache messages, I assumed it was a hack whereby
webservers were hijacked as spam servers and the hack was broken, and
thought it an isolated incident.

I'll be checking my stats to see if my volume drops any.  I'm not sure
it will.  I suspect that Ralsky's personal email and such are broken,
but his spam servers in China/Korea/Brazil/Peru will be just fine.

Andrew 8)

  
-----Original Message-----
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Monday, October 17, 2005 12:16 PM
To: [email protected]
Subject: Re: [Declude.JunkMail] OT: FBI puts stop to Spam King

Do you think it is possible that this is connected to the 
rash of broken spamware that started yesterday (Apache error 
message from spam zombies)?  I have gotten probably 5,000 of 
those in the last 24 hours.

All I can say is that it's about time.  Maybe the FBI should 
spend some time on the Spamhaus site...

    http://www.spamhaus.org/statistics/spammers.lasso

Matt



Colbeck, Andrew wrote:

    
http://www.detnews.com/2005/technology/0510/16/B01-349738.htm

For you Monday enjoyment,

Andrew 8)




---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
"unsubscribe Declude.JunkMail".  The archives can be found at 
http://www.mail-archive.com.


 

      
---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
type "unsubscribe Declude.JunkMail".  The archives can be 
found at http://www.mail-archive.com.

    
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  

Reply via email to