LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback
User Name
Password
LQ Suggestions & Feedback Do you have a suggestion for this site or an idea that will make the site better? This forum is for you.
PLEASE READ THIS FORUM - Information and status updates will also be posted here.

Notices


Reply
  Search this Thread
Old 08-12-2014, 04:41 AM   #1
salasi
Senior Member
 
Registered: Jul 2007
Location: Directly above centre of the earth, UK
Distribution: SuSE, plus some hopping
Posts: 4,070

Rep: Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897
New outbreak of spam: what is going on?


I notice that there has been a new oubreak of spam in the fora - many with names like "Vashikaran mantra by baba ji" and "all type vashikaran astrologer" (I think that the point of these is the phone number embedded in the title, so I've omitted it...no sense in helping the ********).

The 'content' of the posts seems to be the kind of thing that happens when you cat sits on the keyboard or you sweep you fingers across the keys.

I'm just interested in what is going on; I know that there are already measures in place to prevent that kind of thing, so presumably someone has found a new way of avoiding them.

As I say, I know that there are some measures in place, so, from my point of view, this is just general interest. Obviously, it would be undesirable to give away any details that help the ******** do this more effectively.
 
Old 08-12-2014, 05:12 AM   #2
coralfang
Member
 
Registered: Nov 2010
Location: Bristol, UK
Distribution: Slackware, FreeBSD
Posts: 836
Blog Entries: 3

Rep: Reputation: 297Reputation: 297Reputation: 297
I searched that number they are posting, seems to be random job titles involving love/marriage help all over the web (google has ~6000 results of spam), i imagine it's a premium number that would empty your phone credit rather quickly. The content of their posts is just to get past empty forms, their only intention is getting people to ring the number.

There's also the possibility they are trying to flood search engine results for some reason. Maybe to discredit the actual owner of the phoneline (ie; person googles your phonenumber and gets the impression you do alot of bollywood astrology, lol).
 
Old 08-12-2014, 06:02 AM   #3
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,467

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Taking a quick look at it, it looks like this type of spam is rather difficult to automatically detect as there's not "much" to go on as it's just a subject and the body is short and random.

Personally on my own forum I manually check registrations from known "spam" countries and the first 10 posts anyone makes from one of these countries also has to be manually approved.

jeremy has a more open policy here on LQ, fortunately the site moderators are usually pretty good at cleaning up the rare junk that gets through.
 
Old 08-12-2014, 06:03 AM   #4
PrinceCruise
Member
 
Registered: Aug 2009
Location: /Universe/Earth/India/Pune
Distribution: Slackware64 -Current
Posts: 890

Rep: Reputation: 186Reputation: 186
Haha, I saw it too. Vashikaran mantra in Hindi means a spell to hypnotize/control somebody. I laughed so hard.
Indian ISPs are infamous for their low level of security measures and concerns towards their users and this is the reason a huge part of Internet spam is originating from our ISPs. I've been even banned to register on PCLinuxOS forum just because of this.

Regards.

Last edited by PrinceCruise; 08-12-2014 at 06:04 AM.
 
Old 08-12-2014, 07:55 AM   #5
Randicus Draco Albus
Senior Member
 
Registered: May 2011
Location: Hiding somewhere on planet Earth.
Distribution: No distribution. OpenBSD operating system
Posts: 1,711
Blog Entries: 8

Rep: Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635
Quote:
Originally Posted by PrinceCruise View Post
I've been even banned to register on PCLinuxOS forum just because of this.
I feel your pain. I have many difficulties trying to use North American and European sites, because my ISP is in China. So understandably, I would not be very thrilled if my "first 10 posts had to be manually approved," because I live in "one of those" places. In fact, after the first two or three posts, I would probably leave.
 
Old 08-12-2014, 08:05 AM   #6
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,467

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Quote:
Originally Posted by Randicus Draco Albus View Post
I would not be very thrilled if my "first 10 posts had to be manually approved," because I live in "one of those" places. In fact, after the first two or three posts, I would probably leave.
As my forum is a motorsport one I've found that for most of the "spammy" countries there isn't a lot of motorsport, and anyone that is interested sticks around. Different forums, different userbases
 
Old 08-12-2014, 08:16 AM   #7
Randicus Draco Albus
Senior Member
 
Registered: May 2011
Location: Hiding somewhere on planet Earth.
Distribution: No distribution. OpenBSD operating system
Posts: 1,711
Blog Entries: 8

Rep: Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635
And I imagine it is obvious such people are interested after two to three posts, yes?
 
Old 08-12-2014, 09:37 AM   #8
Goobers
Member
 
Registered: Jul 2014
Posts: 56

Rep: Reputation: Disabled
In the few days since I joined, I've seen four "waves" of spam. The most obvious commonality is that they're all created in somewhat rapid succession in each wave (10 messages in 10 minutes).

I, myself, am not too fond of the idea of manually approving messages, nor think that's a very efficient use of the mods time. I also don't think cleaning up these message waves is something I would want to deal with if I were a mod.

Perhaps the powers-that-be can include a simple waiting period in-between topic creations for a given NEW user. Something like 5 to 10/15 minutes would probably cut down the wave.
 
Old 08-12-2014, 09:39 AM   #9
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,600

Rep: Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083
We've updated a couple of our filters to automatically catch more of this recent spam wave. While our filters are pretty effective (they catch between 95-99+% of attempts depending on the day), spammers are a dedicated and resourceful bunch unfortunately. I apologize for the inconvenience.

--jeremy
 
1 members found this post helpful.
Old 08-12-2014, 09:47 AM   #10
Goobers
Member
 
Registered: Jul 2014
Posts: 56

Rep: Reputation: Disabled
edit: I'm getting too opinionated.

Last edited by Goobers; 08-12-2014 at 09:51 AM.
 
Old 08-13-2014, 01:17 AM   #11
k3lt01
Senior Member
 
Registered: Feb 2011
Location: Australia
Distribution: Debian Wheezy, Jessie, Sid/Experimental, playing with LFS.
Posts: 2,900

Rep: Reputation: 637Reputation: 637Reputation: 637Reputation: 637Reputation: 637Reputation: 637
They are back again in full flight today Jeremy, methinks the spam filter may be taking a nap.
 
Old 08-13-2014, 03:24 AM   #12
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,780

Rep: Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304Reputation: 7304
what about the following:
moderators and contributing members and .... are allowed to mark someone as spammer. From that point all the messages from him will be filtered out (to be on the safe side: for example five mark events will activate the filter only)
 
Old 08-13-2014, 08:58 AM   #13
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,600

Rep: Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083Reputation: 4083
Quote:
Originally Posted by pan64 View Post
what about the following:
moderators and contributing members and .... are allowed to mark someone as spammer. From that point all the messages from him will be filtered out (to be on the safe side: for example five mark events will activate the filter only)
Group spam marking by mods (with potential input from Senior Members) is on the roadmap.

--jeremy
 
Old 08-13-2014, 11:20 AM   #14
sgosnell
Senior Member
 
Registered: Jan 2008
Location: Baja Oklahoma
Distribution: Debian Stable and Unstable
Posts: 1,943

Rep: Reputation: 542Reputation: 542Reputation: 542Reputation: 542Reputation: 542Reputation: 542
It's always an escalating arms race between spammers and spam filter programmers. No matter what the filters do, the spammers will find a way around them, at least temporarily. Personally, I just ignore the spam posts. It's not really that hard to recognize them from the thumbnail. On forums which don't allow a thumbnail of posts, it's more difficult to see them, but not impossible.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Flame Virus: Did Kaspersky CEO Indirectly Predict Outbreak? LXer Syndicated Linux News 0 05-31-2012 12:20 AM
Auto deleting spam assasins spam box via cronjob and Roundcube Junk Folder osmy Linux - Newbie 8 01-23-2012 04:22 PM
Move SA Marked Spam to Junk/Spam Folder Using Procmail, Postfix, and Virtual Users alden_pease Linux - Server 0 01-05-2012 12:29 AM
postfix spam. someone is using my server to send spam and it's not open relay bob808 Linux - Server 6 03-23-2010 09:44 AM
spam filter that puts spam into spam folder? paul_mat Linux - Software 3 03-31-2009 04:18 AM

LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback

All times are GMT -5. The time now is 05:23 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration