{"id":178,"date":"2007-07-11T15:59:37","date_gmt":"2007-07-11T14:59:37","guid":{"rendered":"http:\/\/tinyplanetblog.com\/?p=178"},"modified":"2007-07-11T15:59:37","modified_gmt":"2007-07-11T14:59:37","slug":"cunning-spammy-bastards","status":"publish","type":"post","link":"http:\/\/tinyplanetblog.com\/?p=178","title":{"rendered":"Cunning spammy bastards"},"content":{"rendered":"

Recently, amidst the de rigeur<\/em> spam touting generic Viagra and pleas for my account details with a bank I don’t use, I have been receiving PDFs as attachments. Naturally I haven’t opened a single one.<\/p>\n

I have been sent attachements in the past, but this marks a new trend in spamming one particular email address I use. Today I got three PDFs: check.pdf, abuse.pdf and email_a5c087e.pdf. Using Thunderbird<\/strong> I checked the message source code and all three seem to have the same data:<\/p>\n

JVBERi0xLjMgCjEgMCBvYmoKPDwKPj4KZW5kb2JqCjIgMCBvYmoKPDwKL1R5cGUgL0NhdGFsb2cK
\nL1BhZ2VzIDMgMCBSCj4+CmVuZG9iagozIDAgb2JqCjw8Ci9UeXBlIC9QYWdlcwovS2lkcyBbIDQg
\nMCBSIF0KL0NvdW50IDEKPj4KZW5kb2JqCjQgMCBvYmoKPDwKL1R5cGUgL1BhZ2UKL1BhcmVudCAz
\nIDAgUgovUmVzb3VyY2VzIDw8Ci9Gb250IDw8IC9GMCA4IDAgUiA+PgovWE9iamVjdCA8PCAvSW0w
\nIDkgMCBSID4+Ci9Qcm9jU2V0IDcgMCBSID4+Ci9NZWRpYUJveCBbMCAwIDU4NCAyMDhdCi9Dcm9w<\/p><\/blockquote>\n

And so forth. I googled the code and I’m not the only one to get this rubbish<\/a>. It seems to be the latest fashion for spammers, PDFs that contain images<\/a>. Bastards.<\/p>\n

The other peculiar mail I got today was from someone in Germany claiming:<\/p>\n

Our robot has detected an abnormal activity from your IP adress on sending e-mails. Probably it is connected with the last epidemic of a worm which does not have official patches at the moment. We recommend you to install this patch (I have removed the URL, which was in numbers rather than words) to remove worm files and stop email sending, otherwise your account will be blocked.<\/p>\n

Customer Support Robot<\/p><\/blockquote>\n

Considering the email has such gibberish addresses as bhyjt@wfrmls.com<\/strong> and a36dcae987d9000be022d968088aea28@wfrmls.com<\/strong>, how dumb do they think I am? Straight to the junk directory, and from there OBLIVION<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Recently, amidst the de rigeur spam touting generic Viagra and pleas for my account details with a bank I don’t use, I have been receiving PDFs as attachments. Naturally I haven’t opened a single one. I have been sent attachements in the past, but this marks a new trend in spamming one particular email address […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[31,42,46],"tags":[],"_links":{"self":[{"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=\/wp\/v2\/posts\/178"}],"collection":[{"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=178"}],"version-history":[{"count":0,"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=\/wp\/v2\/posts\/178\/revisions"}],"wp:attachment":[{"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=178"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/tinyplanetblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}