"invisible" words in html e-mails

Valentin Chopov valentin@valcho.net
Fri Aug 8 15:57:56 UTC 2003


Hi,

It looks that the spammers found a way to trick DCC and SpamAssassin.
They are generating an html e-mails with an invisible words (font color of
the text is the same as  the bg color). Currently we got "font
color="#ffffff" (white) messages only. All words a regular words, not
included any spam checks. Is it possible to exclude the "invisible" words
from the DCC checking?

Thanks,
Val

P.S. See below for an example of this kind of messages.

==
Valentin S. Chopov, CC[ND]P
Sys/Net Admin
SEI Data Inc.
E-Mail: valentin@valcho.net
==

Message Example:

---cut---

<html>
<body>
<font color="#ffffff">credulity <font color="#ffffff">memoir <font color="#ffffff">tetrahedron
<font color="#ffffff">examined <font color="#ffffff">beowulf <font color="#ffffff">bounties
<font color="#ffffff">tens <font color="#ffffff">braver <font color="#ffffff">telegrams
<font color="#ffffff">poem <font color="#ffffff">schoolgirl <font color="#ffffff">scrolled
<font color="#ffffff">bon <font color="#ffffff">hydrophilic <font color="#ffffff">screeching
<font color="#ffffff">methodists <font color="#ffffff">boll <font color="#ffffff">mechanizations
<font color="#ffffff">accusingly <font color="#ffffff">crankily <font color="#ffffff">maw
<font color="#ffffff">talcum <font color="#ffffff">taxable <font color="#ffffff">plunder
<font color="#ffffff">humidistat <font color="#ffffff">agatha <font color="#ffffff">cozy
<font color="#ffffff">mete <font color="#ffffff">costing <font color="#ffffff">expiate
<font color="#ffffff">blundered <font color="#ffffff">schizophrenia <font color="#ffffff">pooled
<font color="#ffffff">expounder <font color="#ffffff">howls <font color="#ffffff">taproots
<font color="#ffffff">bogus <font color="#ffffff">scriptures <font color="#ffffff">bony
<font color="#ffffff">crevices <font color="#ffffff">creeds <font color="#ffffff">advisory
<font color="#ffffff">bobs <font color="#ffffff">temptingly <font color="#ffffff">evading
acidity medians tainted
boaster corrupts birmingham
teller portrayed teleost
acculturation evenly mentionable
cowing ainu humanity
tarpaper materialized betty
expunge themes achromatic
address boor crests
eulogy pointedly meting
pleases administrate ethane portage microinstructions polariton
hornmouth maximal boy tatty bassett
<p> <a href="http://srd.yahoo.com/drst/polarities/*http://www.med12z.com/sh/index.html">
  <img border="0"
 src="http://srd.yahoo.com/drst/playback/*http://www.7x24pharm1.com/file/ra.gif" >
  </a> <br>
  <a href="http://www.med12z.com/page/a.html">remove mail</a></p>
<font color="#ffffff">argentina <font color="#ffffff">crisp <font color="#ffffff">adjoint
<font color="#ffffff">teemed <font color="#ffffff">hurriedly <font color="#ffffff">bows
<font color="#ffffff">advantaged <font color="#ffffff">microscope <font color="#ffffff">posey
<font color="#ffffff">bahama <font color="#ffffff">horns <font color="#ffffff">metier
<font color="#ffffff">territories <font color="#ffffff">creditors <font color="#ffffff">mauve
<font color="#ffffff">tetragonal <font color="#ffffff">tentacled <font color="#ffffff">boon
<font color="#ffffff">brandish <font color="#ffffff">tentacles <font color="#ffffff">adsorbed
<font color="#ffffff">covers <font color="#ffffff">artie <font color="#ffffff">blurts
<font color="#ffffff">coworker <font color="#ffffff">sciatica <font color="#ffffff">portent
<font color="#ffffff">taxpaying <font color="#ffffff">hundred <font color="#ffffff">borrowed
<font color="#ffffff">plunge <font color="#ffffff">excommunicate <font color="#ffffff">blenheim
<font color="#ffffff">metamathematical <font color="#ffffff">ignition <font color="#ffffff">braids
<font color="#ffffff">melodies <font color="#ffffff">coughing <font color="#ffffff">maze
<font color="#ffffff">taunts <font color="#ffffff">accreditations <font color="#ffffff">adornment
<font color="#ffffff">housewives <font color="#ffffff">plow <font color="#ffffff">arnold
<font color="#ffffff">allyn <font color="#ffffff">meandering <font color="#ffffff">acrimony
<font color="#ffffff">savage <font color="#ffffff">takeover <font color="#ffffff">brake
<font color="#ffffff">horsedom <font color="#ffffff">brawn <font color="#ffffff">exhausted
pollutant exculpate maxims
theocracy mellowing illusion
american immemorial scalp
illustratively acres bookish
mendacity poisoning hydraulic
existed councilman materialized
temperatures seasoner boardinghouses mauve screens courteous
hyphenate technology tarring tents accessible</font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font></font!
 ></font></font></font></fo
nt></font></font></font></font></font></font></font>
</body>
</html>

---cut---




More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.