Government Security
Network Security Resources

Jump to content

Photo

Program Challenge

- - - - - perl spam
  • Please log in to reply
3 replies to this topic

#1 AlVlen

AlVlen

    Private

  • Members
  • 2 posts

Posted 18 November 2007 - 12:37 AM

Greetings everyone,

Background: Myspace Spam

Many may be aware of the issues of spam that Myspace has suffered for a few years now. The new spam is more insidious, now, as it is the utilization of hidden (invisible) threads that stay behind in forums after a users profile is deleted. The spammer(s) are pinning the hidden threads and the first page of the group forum gets moved behind what appears to be multiple blank pages.

Previously, the group linked below was spam bombed, massively. An estimate would be 2-3 spam to 1 legitimate message over the board that shows 12000 messages. This spamming has occurred over the past 2 years.

Recently, the group has a savior, as it would seem. He came along when the first page was actually on page 454 or thereabouts. All of the blank pages had hidden pinned topics at 15 topics per page. He suggests that his program is the solution as it can allegedly unpin these hidden messages. However, when attempting to unpin his thread the program is unsuccessful. ?????

While I could go and get all of the necessary programs to decompile his executable. I thought it may be a challenge for others who may have a little extra time and an interest in an intriguing investigation. If you are interested, here are the links to the program and a description of their function.

Reference 1) Program: <a href=http://forum.myspace.com/index.cfm?fuseaction=messageboard.viewThread&entryID=43367133&categoryID=0&IsSticky=1&groupID=100096596&Mytoken=5ED451E8-4890-4DAE-AAE21C2D5FB02AD114235489>Unpinner Program Function Description</a>

<a href=http://www.fileden.com/files/2007/3/19/905384/unpinnerGEN.zip>unpinnerGEN.zip</a>

Reference 2) Timestamp: 14 Nov 2007, 06:49 <a href=http://forum.myspace.com/index.cfm?fuseaction=messageboard.viewThread&groupID=100096596&page=1&EntryID=43367133&CategoryID=0&get=1&adTopicId=0&lastpagesent=0&Mytoken=B31DDC09-8390-48DF-BB98CB10575662A716325080>Perl Script utilization in program</a>.

If this program is not doing what it is allegedly written to do, then what is it actually doing?

Peace

AlVlen

#2 rlastinger

rlastinger

    Sergeant

  • Members
  • 220 posts

Posted 19 November 2007 - 01:18 PM

Greetings everyone,

Background: Myspace Spam

Many may be aware of the issues of spam that Myspace has suffered for a few years now. The new spam is more insidious, now, as it is the utilization of hidden (invisible) threads that stay behind in forums after a users profile is deleted. The spammer(s) are pinning the hidden threads and the first page of the group forum gets moved behind what appears to be multiple blank pages.

Previously, the group linked below was spam bombed, massively. An estimate would be 2-3 spam to 1 legitimate message over the board that shows 12000 messages. This spamming has occurred over the past 2 years.

Recently, the group has a savior, as it would seem. He came along when the first page was actually on page 454 or thereabouts. All of the blank pages had hidden pinned topics at 15 topics per page. He suggests that his program is the solution as it can allegedly unpin these hidden messages. However, when attempting to unpin his thread the program is unsuccessful. ?????

While I could go and get all of the necessary programs to decompile his executable. I thought it may be a challenge for others who may have a little extra time and an interest in an intriguing investigation. If you are interested, here are the links to the program and a description of their function.

Reference 1) Program: <a href=http://forum.myspace.com/index.cfm?fuseaction=messageboard.viewThread&entryID=43367133&categoryID=0&IsSticky=1&groupID=100096596&Mytoken=5ED451E8-4890-4DAE-AAE21C2D5FB02AD114235489>Unpinner Program Function Description</a>

<a href=http://www.fileden.com/files/2007/3/19/905384/unpinnerGEN.zip>unpinnerGEN.zip</a>

Reference 2) Timestamp: 14 Nov 2007, 06:49 <a href=http://forum.myspace.com/index.cfm?fuseaction=messageboard.viewThread&groupID=100096596&page=1&EntryID=43367133&CategoryID=0&get=1&adTopicId=0&lastpagesent=0&Mytoken=B31DDC09-8390-48DF-BB98CB10575662A716325080>Perl Script utilization in program</a>.

If this program is not doing what it is allegedly written to do, then what is it actually doing?

Peace

AlVlen


I'll grab it and try to take a look at it when I get back to my boxes at home.

#3 rlastinger

rlastinger

    Sergeant

  • Members
  • 220 posts

Posted 24 January 2008 - 02:17 PM

I'm still intending to look at it. I get back home tomorrow... finally.

#4 AlVlen

AlVlen

    Private

  • Members
  • 2 posts

Posted 03 February 2008 - 12:32 AM

I'm still intending to look at it. I get back home tomorrow... finally.



Thanks. I see that people are starting to ask for it, again.





Also tagged with one or more of these keywords: perl, spam