[Full-disclosure] Re: Re: Automated mass abuse of form mailers

["Dave Korn" <davek_throwaway@xxxxxxxxxxx>]

----Original Message----
>From: Aditya Deshmukh
>Message-Id:
!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQA
AAAObbFSKrQek2M9ZEfGt0ItwEAAAAA@xxxxxxxxxxxxxxxxxxxxxxxxxxxx

>>> Another address they use is bergkoch8@xxxxxxx
>>> (noticed aol abuse about this, but I guess that's /dev/null)
>>
>>   I'm going to start putting both those addresses into all
>> the unsubscribe
>> links I get in all my spam... >:->
>>
>
> This might be someones' 0wned email address.
>

  It _might_ be, but it's far more likely that they're using it as a dropbox
to test whether their spam is getting through and which scripts are
vulnerable, given the pattern of usage described by the OP.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/