PDA

View Full Version : How do they do this in spam?


ShaneC
21-12-2005, 08:29
Normally Outlook blocks spam pictures but recently we have received a few messages that automatically display an image. They're HTML messages and the code is

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>

<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>&nbsp;</DIV>
<DIV><A href="http://www.google.com/url?sa=D&q=http%3a//www.google.com/url%3fsa=D%26q=http%3a//blockadu.ommofesi%252ecom"><IMG src="cid:000101c604d4$913d4a6e$a1a6a8c0@devotion"></A></DIV>
<DIV>&nbsp;</DIV>
<DIV>often pondered how she might obtain two eggs daily instead of
one, and at last, to gain her purpose, determined to give the Hen
a double allowance of barley. From that day the Hen became fat
and sleek, and never once laid another egg.
The Ass and the Old Shepherd
A SHEPHERD, watching his Ass feeding in a meadow, was alarmed all
of a sudden by the cries of the enemy. He appealed to the Ass to
fly with him, lest they should both be captured, but the animal
lazily replied, Why should I, pray? Do you think it likely the
conqueror will place on me two sets of panniers? No, rejoined
the Shepherd. Then, said the Ass, as long as I carry the
panniers, what matters it to me whom I serve?
In a change of government the poor change nothing beyond the name</DIV></BODY></HTML>

It seems the http reference is pulling in the picture. Does anyone know how to stop Outlook 2003 displaying these images.

Ta, Shane.

sideshowbob
21-12-2005, 08:41
My outlook 2003 automatically stops that sort of thing, I have to click on the pics to download them.

It's configured in Tools > Options > Security

ShaneC
21-12-2005, 08:45
My outlook 2003 automatically stops that sort of thing, I have to click on the pics to download them.

It's configured in Tools > Options > Security

Aha, but not those messages, normal pictures are blocked in my Outlook but the above appears, seems the spammers have found a hole.

Chris
21-12-2005, 12:41
It's an embedded image that encoded into the email. As it is not obtained externally outlook doesn't block it because it can't be used from tracking and so is not a risk.

This method is used to allow offline viewing of the email but does increase the size of the email.

ShaneC
21-12-2005, 12:53
It's an embedded image that encoded into the email. As it is not obtained externally outlook doesn't block it because it can't be used from tracking and so is not a risk.

This method is used to allow offline viewing of the email but does increase the size of the email.

Cheers Chris, I'm guessing thats what the cid part of the e-mail is then. We've actually managed to block them by reducing the score on Spam assasin where e-mails are blocked.

Ta, Shane.