azurelunatic: Azz: Spamwhacker, with a white dreamsheep on a stalk growing up out of the grass like a flower (spamwhacker)
Azure Jane Lunatic (Azz - bolt of blue - infovore) ([personal profile] azurelunatic) wrote in [site community profile] dw_antispam2011-08-08 06:02 pm

Yes, Virginia, it is a spam campaign! (Keysmash + misspelled vague compliment campaign)

Hi, Dreamwidth!

Since I saw a couple people wondering, I wanted to confirm that there is a known spam campaign that leaves anonymous comments with a subject that looks like a cat walked over the keyboard while a second cat was repeatedly batting the caps lock key off and on, with the body containing a vague compliment with at least one word where the letters have been artfluly rearranged.

The keysmash subject is likely a unique identifier, so the spammer can tell which specific comment got through when it checks or searches later.

Why the vague compliments? Well, a compliment may well fit in to the existing conversation, and may be a way of attempting to build up a reputation as harmless/helpful for that IP address.

Why no spammy links? This may be merely a test campaign, to see how soft a target we are. Or they may just be attempting to build up good reputation so that when they do make with the links, they won't immediately get kicked off the site. Or they may not have anyone paying them to spam right now. But the IP that's emitting gibberish and compliments today is surely tomorrow's viagra-and-handbags vendor.


If you find that you've been getting keysmash-and-misspelled-compliments, please do go ahead and delete them as spam if you have the time and energy. A lot of them, even old ones, are from unique IP addresses, so you may have been the only one hit by that particular specific source.

If you have questions about other comments that don't fit this pattern, you can ask: here, in Support, in the latest [site community profile] dw_news entry, and probably some other places. There are usually a lot of helpful people around who either know off the tops of their heads, or know where to find a spamwhacker.
ajnabieh: The text "My Marxist feminist dialective brings all the boys to the yard."   (Default)

[personal profile] ajnabieh 2011-08-09 01:30 am (UTC)(link)
You are awesome. Thanks.
rhi: a cobweb covered with dew and one drop up at the top (web)

[personal profile] rhi 2011-08-09 02:57 am (UTC)(link)
Thank you for the update!!
rydra_wong: Dreamsheep holding a hammer; "Dreamwidth Antispam". (dreamwidth -- spamsheep)

[personal profile] rydra_wong 2011-08-09 07:03 am (UTC)(link)
Thanks for posting this! I'd also seen people wondering.
ghoti: fish jumping out of bowl (Default)

[personal profile] ghoti 2011-08-09 10:47 pm (UTC)(link)
do you still need help spamwhacking? i've got a couple of hours and am good at repetitive...
cobweb_diamond: (Default)

[personal profile] cobweb_diamond 2011-09-30 12:40 am (UTC)(link)
I've received one or two of these keysmash comments in the past, but over the last couple of days I've received about 80 of them. i'm deleting them all and marking them as spam, but should I be worried?

[personal profile] blacklabel 2011-10-02 02:23 pm (UTC)(link)
I know this post is a couple months old but! I am so glad DW is invite code only. This comment over at IJ (http://asylums.insanejournal.com/announcements/85813.html?thread=4486453#4486453) kind of freaked me out. Is it possible for something like that to happen here, at DW? (I'm really hoping the answer is 'no'!)
red_trillium: picture of a strata loach fish with the caption "I got u a wafer but I eated it" (Got U A Wafer Strata Loach)

[personal profile] red_trillium 2011-10-28 09:16 am (UTC)(link)
Hiya Azurelunatic, I thought I'd mention (in case the original Journal Owner is only deleting, not also marking as Spam) that we've seen 3 of these key smash type spam comments in the last day or 2 with links, at [personal profile] dreamwriteremmy's entry: here.

Here are links to 2 of the comments, looks like one was deleted but I"ve got the email notification. One here and one here.

I don't have Dreamwriteremmy on my friends list but have subscribed to this particular entry.
Edited (Sorry, inappropriate icon!) 2011-10-28 09:16 (UTC)
red_trillium: cartoon cat that says "I love cats but can't eat a whole one" (Default)

[personal profile] red_trillium 2011-10-31 06:10 am (UTC)(link)
Thank you for your explanation! I wasn't sure if I should bring it up here.