How the spammers are doing it

This is a discussion on How the spammers are doing it within the General Trading Chat forums, part of the Reception category; Originally Posted by wackypete2 Hey guys... 1x1 pixels are not or do not have to be clickable links. The php ...

Reply
 
LinkBack Thread Tools Search this Thread
Old Oct 25, 2011, 12:19pm   #31
 
barjon's Avatar
Joined May 2003
Re: How the spammers are doing it

Quote:
Originally Posted by wackypete2 View Post
Hey guys...
1x1 pixels are not or do not have to be clickable links. The php script automatically registers a hit each time the page is loaded via the pixel. Without seeing the script I don't know exactly how it works but at a minimum it shows how many times the t2w page(s) were loaded, ie: visitors to the tw2 page(s). This is still useful info.

Also...bad news here. This same method is used in email to transmit adware or malware just by opening the email. IT CAN ALSO BE USED THAT SAME WAY HERE EACH TIME A PAGE WITH THE SCRIPT IS LOADED. However my spyware and virus logs are not registering anything so that's most likely NOT how it's being used here so far.

I had a link to some great info on how the email spam works in a post that was deleted. Naturally I can't find the link again. Shame on me. Maybe barjon can sort though the post.

Peter
was this the one, pete?

Hey guys here's more info on whats happening. Admin really needs to remove the posts altogether.

the ukuo_dot_info site is a php script redirect. In this case it redirects to a known site, in this case cuoda_dot_net. The known sites were hijacked. This is an email method and gets past many email and browser site checks since the known sites don't have any type of spam/scam complaints against them.

There are 2 uses for this. First is to cause malware to set up on a computer to either siphon information or transmit information and infection is simply by opening an email. More info on that here: CyberCrime & Doing Time

The other use is what I believe is being used here. Some sort of pay-thru counter like click-thru only you don't have to click, just load the page. I'm not sure but probably a combination of the 2 can be used to insert malware on computers that load the page - conjecture on my part, but seems reasonable.

Peter

barjon is online now   Reply With Quote
Old Oct 25, 2011, 12:28pm   #32
Joined Sep 2008
Re: How the spammers are doing it

wackypete2 started this thread Thats it Many thanks!
For those interested google "CyberCrime & Doing TIme" for the info on the email stuff.

hehe, I saved the link this time


Peter
wackypete2 is offline   Reply With Quote
Old Oct 25, 2011, 12:33pm   #33
Joined Sep 2008
Re: How the spammers are doing it

wackypete2 started this thread
Quote:
Originally Posted by barjon View Post
I don't understand how this all works. Would it be the case that every time members opened a zutou post it would have clicked through to a "hit" on Amazon? Since members didn't know they were there they were not "inconvenienced" by being prompted to visit Amazon and I can't see how Amazon would benefit in any way unless those members found their way to them to potentially buy something.

All seems very odd.
So far none of us completely understand it, but it's either what you have just described or something very similar.

Still picking away at it

Peter
wackypete2 is offline   Reply With Quote
Old Oct 25, 2011, 12:54pm   #34
 
DionysusToast's Avatar
Joined Dec 2009
Re: How the spammers are doing it

Can we see the script?
__________________
The proof of the pudding is whether there is actually any pudding in the first place.
DionysusToast is offline Software vendor   Reply With Quote
Old Oct 25, 2011, 1:17pm   #35
Joined Sep 2008
Re: How the spammers are doing it

wackypete2 started this thread
Quote:
Originally Posted by DionysusToast View Post
Can we see the script?
I haven't been able to. I'm not sure you can. It's not like javascript where the code loads directly into the html before the page is displayed. My knowledge of this stuff is a little out of date though. It's been quite a while since I actually used most of it.

Peter
wackypete2 is offline   Reply With Quote
Old Dec 12, 2011, 8:55pm   #36
 
ingot's Avatar
Joined Sep 2011
Re: How the spammers are doing it

wow this is crazy! technology man...
ingot is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
Message to Spammers of pennystockmagic & canadapick Trader333 General Trading Chat 21 Jun 23, 2010 12:10am
Spammers, damned spammers, and really sneaky spammers nine T2W Feedback & Announcements 3 Mar 31, 2008 9:34am
Spammers jpwone T2W Feedback & Announcements 5 Feb 20, 2004 10:47am

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)