Dictionary spamming is a spamming technique where spammers attempt to guess E-mail addresses by using a dictionary attack based on adding plausible names as prefixes to known domain names. A KMail folder full of spam emails collected over a few days. ... An e-mail address, also known as an eddress (from electronic address) or simply as ones email, identifies a location to which e-mail messages can be delivered. ... In cryptanalysis and computer security, a dictionary attack is a technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by searching a large number of possibilities. ...
The names used are typically generated from a dictionary of common names and surnames, or culled from already-known E-mail addresses: a wide variety of common E-mail address naming conventions will typically be tried. Although most of the generated names will not exist, the effort is generally worth it for the spammers, as a discovered E-mail address may then be used for many subsequent spam runs. The aim is not to discover all possible E-mail addresses: just discovering the "low-hanging fruit" is sufficient to meet the spammers' goals.
In many cases, a short test E-mail will be sent first, to check for a bounce message. Another common way of verifying E-mail addresses is the use of links to external images in HTML E-mail: by making the links to the images into unique identifiers, it is possible to reconcile hits on the image server with the E-mail address, verifying not only that the E-mail does not bounce, but that it has been viewed in an E-mail client. Finally, clicks on external links in spammed E-mails can be used to verify not only that there is a human being using the E-mail address, but also that they are likely to click spammed links.
Feeds |
Contact