Re: Porno spam using form submissions

by "N.Whittley" <NWHITTLEY(at)cinci.rr.com>

 Date:  Sat, 1 Dec 2001 08:17:20 -0500
 To:  "doonavitch" <ddoonan1(at)nycap.rr.com>,
<hwg-techniques(at)mail.hwg.org>
 References:  rr
  todo: View Thread, Original
David
I have had those also.  When I got them they all said  something
like WWW Form Submission.  I didn't investigate them because I immediately
felt it as a disguise.  They could put anything as the header, and create
emails that look like a form result.  But some of the things that I found
missing were the
user information stats that alot of folks include in their forms.  And most
forms ask for alot more info.  They are few and far between when I get them,
but no matter they always look alike.

I think it is just faked.   Not to say they are not hacked into that
companies computer to send these, I just think they are fabricated.  But in
this world anything is possible.

Nancy


> A couple of porno-related pieces of spam arrived yesterday. Both were
listed
> as being the result of form submissions. The first one I simply deleted.
The
> second one was submitted from a site called Karina@Wantsto@@@@.com
>
> Looking at the html source, the second email actually came from a
legitimate
> auto parts business. It appears that someone either has hacked their
> servers, or is using a form submission on their site to redirect.
>
> Considering that many of my sites are using form submissions to gather
> information, what can I do to make sure that no one is using them to send
> out spam using my server?
>
> David
>
>

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA