azurelunatic: A glittery black pin badge with a blue holographic star in the middle. (Default)
Azure Jane Lunatic (Azz) 🌺 ([personal profile] azurelunatic) wrote in [site community profile] dw_antispam2012-01-25 05:51 pm

New spam campaign variation - keysmash subject, financial comment

There's a new variation on one of the ever-popular testing campaigns.

(A "testing campaign" is where the spammer pokes a location that it might like to actively spam in the future, to see how easy it is to leave comments there, how long the comments last, and whether they will show up in search engines, and possibly other things. These campaigns don't actually leave spam links, but they're still run by spammers, get in people's way, and should be treated the same as spam with actual links.)

This particular spam campaign features a subject line that looks like YouTube sneezed, and then a financially-related comment. It probably makes no sense in context with the entry or comment that it's in reply to.

Other similar campaigns:
Keysmash subject, vague compliment
Keysmash subject, vague compliment (often self-deprecating) with (at least) one misspelled word (there may be other misspelled words in the comment, but those are usually in line with common netspeak; the misspelled word that identifies this campaign uses all the correct letters, but out of order)

Be suspicious of any comment that includes a random-looking keysmash, because that keysmash is probably unique to that one piece of spam, and the spammer will go looking for it later to see if what it did that time got through and made it stay in place.
noxie: friendly girl smiling (!cuteness)

[personal profile] noxie 2012-01-28 10:33 am (UTC)(link)
Hi and thanks for all your hard work! I have a question: What can I do if I suspect that I have received a spammy reply to a comment I left in a community? There's no link I can click to report it as spam.

This is the comment in question:
marahmarie: my initials (MM) (Default)

[personal profile] marahmarie 2012-01-30 04:24 am (UTC)(link)
What [personal profile] noxie said. Same deal over at [community profile] css_code. Never realized before that there is (seemingly, at least) no way to delete spam from comms.
Edited (typo) 2012-01-30 04:24 (UTC)
marahmarie: my initials (MM) (Default)

[personal profile] marahmarie 2012-01-30 04:41 am (UTC)(link)
I am the creator! And the admin!
marahmarie: my initials (MM) (Default)

[personal profile] marahmarie 2012-01-30 04:49 am (UTC)(link)
That's weird.

Not so much, since I lost my spot on the page and was trying to delete my own comment as spam when I was after afuna's comment above mine. Sorry for the false alarm.
Edited 2012-01-30 04:50 (UTC)

Re: keysmash subject

[personal profile] listener_sheogorath 2012-12-12 09:41 am (UTC)(link)
Often, spammers have keysmashed names. So often the person leaving links or gibberish on the forums I help run has a seemingly random string of letters for a name that I open up the profile of such people in a new tab before even opening their posts, and sure enough, I'm swinging the banhammer 99.9% of the time.