azurelunatic: A glittery black pin badge with a blue holographic star in the middle. (Default)
Azure Jane Lunatic (Azz) 🌺 ([personal profile] azurelunatic) wrote in [site community profile] dw_antispam2012-01-25 05:51 pm

New spam campaign variation - keysmash subject, financial comment

There's a new variation on one of the ever-popular testing campaigns.

(A "testing campaign" is where the spammer pokes a location that it might like to actively spam in the future, to see how easy it is to leave comments there, how long the comments last, and whether they will show up in search engines, and possibly other things. These campaigns don't actually leave spam links, but they're still run by spammers, get in people's way, and should be treated the same as spam with actual links.)

This particular spam campaign features a subject line that looks like YouTube sneezed, and then a financially-related comment. It probably makes no sense in context with the entry or comment that it's in reply to.

Other similar campaigns:
Keysmash subject, vague compliment
Keysmash subject, vague compliment (often self-deprecating) with (at least) one misspelled word (there may be other misspelled words in the comment, but those are usually in line with common netspeak; the misspelled word that identifies this campaign uses all the correct letters, but out of order)

Be suspicious of any comment that includes a random-looking keysmash, because that keysmash is probably unique to that one piece of spam, and the spammer will go looking for it later to see if what it did that time got through and made it stay in place.

Post a comment in response:

From:
Anonymous( )Anonymous This account has disabled anonymous posting.
OpenID( )OpenID You can comment on this post while signed in with an account from many other sites, once you have confirmed your email address. Sign in using OpenID.
User
Account name:
Password:
If you don't have an account you can create one now.
Subject:
HTML doesn't work in the subject.

Message:

 
Notice: This account is set to log the IP addresses of everyone who comments.
Links will be displayed as unclickable URLs to help prevent spam.