Question about spam with PDF files

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Baiting Guru Joined: 03 May 2007 Posts: 18313

Lately I have been getting spam with no text and an attached pdf file. I haven't opened any of the files. Does anyone know anything about this?

Here is the header from the latest:

Quote:

(InterMail vM.6.01.05.04 201-2131-123-105-20051025) with ESMTP
id <[email protected]>
for <[email protected]>; Sat, 7 Jul 2007 07:34:52 -0400
Received: from 135-166.187-72.tampabay.res.rr.com ([72.187.166.135])
by edge3.adelphia.net
(InterMail vG.2.00.00.02 201-2161-108-103-20050713) with SMTP
id <20070707113452.ZHPM17141.edge3.adelphia.net@135-166.187-72.tampabay.res.rr.com>
for <[email protected]>; Sat, 7 Jul 2007 07:34:52 -0400
Received: from [227.204.120.228] (helo=agb)
by 135-166.187-72.tampabay.res.rr.com with smtp (Exim 4.66 (FreeBSD))
=?ISO-8859-1?q?id=201I79=D8%-0005Zb-Co=3B=20Sat=2C=207=20Jul=202007=2007?=
=?ISO-8859-1?q?=3A37=3A24=20-0400?=
Message-ID: <[email protected]>
Date: Sat, 7 Jul 2007 07:34:48 -0400
From: diplomat <[email protected]>
User-Agent: Thunderbird 1.5.0.12 (Windows/20070509)
To: [email protected]
Subject: Text.16506868407.pdf
X-Antivirus: AVG for E-mail 7.5.476 [269.10.1/888]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=------------050604020407060506040402

It looks like its from Tampa Bay Resort?
I have gotten a whole bunch of them over the past two days. Didn't check the headers on the others.

Posted: Sat Jul 07, 2007 7:29 pm

There's little use in header checking on spam-emails. Wink

It's pump'n'dump scams...

Posted: Sat Jul 07, 2007 7:38 pm

Ima Baeder wrote:

... I haven't opened any of the files. ...

I certainly hope not. Shocked

Ima Baeder wrote:

... Does anyone know anything about this? ...

Err, it's spam. Who cares?

Ima Baeder wrote:

... Here is the header from the latest ... Didn't check the headers on the others.

Since being on the internet, I have developed a twitch: see spam, hit "delete."

Whe I see dog crap on the sidewalk, I never investigate it. It's dog crap. Wink

Posted: Sat Jul 07, 2007 8:35 pm

Have noticed lately an increase in the pdf spam as well. Also lately I have been getting alot of greeting cards as well Shocked

. I just dump those as well. No clicky the linky there

Baiting Guru Joined: 03 May 2007 Posts: 18313

Yes, I hit delete when I see spam too. . . I was just curious because I've gotten the ecards, attachments, etc. but never a pdf file and then all of a sudden I started getting them every day over the past few days.

@KD If the dog crap was on my computer I'd wonder about it. Wink

Anyway, thanks.

Posted: Sat Jul 07, 2007 10:57 pm

^^^ Yes, of, course, you're right. Different types of spam come in waves. Currently it's pdfs and ecards. A few months ago it was DAEMON-returns, before that ...

It's probably like our lads; somebody comes up with a "script" and all the other assholes follow it for a while.

Whatever it is, attachments are *always* super-dangerous.

Posted: Sat Jul 07, 2007 11:34 pm

could they be using the pdf files to get around spam filters?

Posted: Sun Jul 08, 2007 8:33 am

yes, of course

Posted: Mon Jul 09, 2007 11:23 am

^^ yes - they put the spam text as a picture in the pdf file so the actual text can't be scanned for spam-alerting pieces of text. As long as you're sure it's a real pdf file you can safely open it (although I don't see the point of doing that).

Posted: Mon Jul 09, 2007 11:28 am

I had noticed that as well... all these emails with weird pdf attachments coming through. I think it caught my attention simply because it was something new, rather than just the same old spam.

Question about spam with PDF files	View next topic View previous topic