On Fri, 21 Aug 2020, Matus UHLAR - fantomas wrote:
>>> On 20.08.20 09:13, Loren Wilton wrote:
>>>> I've started receiving a bunch of spam or more likely phish mails that
>>>> contain the following sort of trash in large quantities between almost
>>>> every word of the visible text. The invisible font rules don't seem to
>>>> catch this.
>>>>
>>>> <span style=3D"font-size: 0vw;">lzdtec</span>
>
>> On Fri, 21 Aug 2020, Matus UHLAR - fantomas wrote:
>>> I have noticed those some time ago.
>>> I wonder what's the point of sending such mail.
>
> On 21.08.20 09:21, John Hardin wrote:
>> It's an attempt to obstruct spam detection via naïve text matching in the
>> raw HTML. It has no effect (beyond being a fairly good spam indicator) if
>> the text is rendered before being scanned.
>
> that would make sense if it contained any non-dummy text
The goal is to break up the words so they can't be recognized by a naïve
scan. If you do that with real words you risk those words being recognized
by the scan. That's why the word obfuscation uses gibberish.
--
John Hardin KA7OHZ
http://www.impsec.org/~jhardin/ jhardin@impsec.org pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
At what point then is the approach of danger to be expected?
I answer, if it ever reach us, it must spring up amongst us.
It cannot come from abroad. If destruction be our lot, we must
ourselves be its author and finisher. As a nation of freemen, we
must live through all time, or die by suicide. -- Abraham Lincoln
...popularly summarized as:
"America will never be destroyed from the outside. If we falter
and lose our freedoms, it will be because we destroyed ourselves."
-----------------------------------------------------------------------
3 days until the 1941st anniversary of the destruction of Pompeii