Spam and hackers
1 like406 views
This document discusses spamming and hacking. It defines spamming as sending unsolicited messages to sell products, phish for information, or hack accounts. Email spam is discussed, as well as how scams work to obtain credit card details. The document outlines some of the challenges hackers face when spamming, such as collecting email addresses and bypassing filters. It provides an example PHP script for sending spam and explains hackers may upload scams to websites or hack SMTP accounts to spam for free, though paid SMTP services are more reliable. Statistics on 2012 spamming are also referenced.
Spam and hackers
- 1. Spam And Hackers Dark-Puzzle (Souhail Hammou) dark-puzzle@live.fr Facebook : www.facebook.com/dark.puzzle From Morocco ( This paper is for educational purposes ONLY)
- 2. What are we covering ? In this paper we are covering what is exactly the meaning of spamming . What is E-mail Spam ? What is the importance of scams and scamming to phish Internet users ? Nowadays Is it important to be a hacker to spam ? What are the problems facing hackers when spamming ? How do hackers spam ? Can I spam for free ? Some Statistics . What is Spamming ? : Spamming is the act of sending or receiving messages from unknown sources , which are trying to sell a product , to phish users and hack accounts (bank accounts , social network credentials). Nowadays , Most of the spam received mails are shown in the junk/spam category in your email due to different advanced technology methods used by mail service providers . The first signs of spamming started in the late 19th century , when Western Union has allowed telegraphic messages to multiple destinations from its networks then multiple companies used it by phone , email , television for economical uses . The advantage of spamming that it is a less cost method to insure the successful advertisement of its products . Thus , the spam infection has been transfered to black hat hackers , those who began to steal bank accounts , email accounts , online shopping credentials using simple methods in the first and more hard method that aquires some experience in hacking in our period now . A person who is spamming is called a « spammer »
- 3. E-mail Spam : Email spam is annoying and dangerous to recipients but effective , especially for hackers that are actually exploiting the human stupidity ( social engineering methods ) to steal important information from them . In general , email spam consists : Anonymity : it means that neither the source of the email nor its sender is known by the recipient . Unsolicited : means that the email isn't requested by the recipient Mass Mailing : means that the e-mail isn't sent for a single person but for many . Spam & Scams : We will be talking now about credit card scams . Here , the hacker have to aquire more knowledge in « scamming » it’s in general the art of creating webscams to obtain credit card details ( the three or four digit code on your card , your credit card number … ) . Thus , they will be using those information to buy things from the Internet or if they have the victim’s PIN code they will be able to transfert , cash out th money from you account . This aquire more anonymity techniques like using
- 4. proxies,VPNs,RDPs,bots… We can say almost the same thing with facebook/gmail/hotmail without the money thing. Who hasn’t tried to phish friends with a fake page using some outdated social engineering techniques :) . Fake Facebook Page Both Fake & Real pages Look Similar , but there is a difference in the « URL » : The real URL is : http://www.facebook.com The Fake URL can be : http://www.hackedsite.com/www.facebook.com/home.php Keep in mind that the hacker can shorten his url or use the hypertext link in his e-mail to hide his link from the victim , some people may notice some may not . Is It Important to be a hacker to spam ? These days you must be a hacker to spam , not a professional hacker but a hacker with knowledge and a little experience , to get credit cards because of the multiple security problem or some situations that you may face. There are many of them like: 1 – Collecting the victims mails to spam . 2 – Uploading your scam and avoiding its detection . 3 – Sending Inbox e-mails to victims . (Bypassing Smart Filters) 4 – Be sure that the result comes only to your email ( if you’re not a scammer). These 4 problems are nothing but the steps that you need to complete your mission correctly to ensure that you will get some good result sent back to you e-mail. How do hackers spam ? First of all , the hacker must get the target Mailing list first . He will have to
- 5. Dump a Shopping website database for example and extact all the emails in their database . Second , he will have to filter these emails as he likes ( Alphabet , EmailProviders , Countries …) . Most hackers are using SQL injection vulnerability that might be present in shopping CMS or maybe biggest companies websites . After getting the maillist manually or using an automated program ( havij , Sqlmap , SQLninja ) or with an e-mail grabber like MailSpider that isn’t that effective. The Hacker have to upload his scam into a website and avoid its detection . Now , If the hacker has some scamming skills he will create his own scam with his own email in it without facing any problems . But If he has downloaded one he will obligatory have to check it for some cryptography including another email other than his own . So the spam result will be going to two different emails . Let’s see an Example : This is an example of the php script which shows us how the email will be sent to us . It is using the famous mail() function to send us back the result . The script demands us to declare our e-mail in the variable $to . Ok we’ve done everything that’s good . But we’ve forgotten that there’s something suspicious about this script . The php include command in line 21 , ok you will say that this is just a visa logo javascript that have nothing that threatens me . Let’s take a closer look at this javascript file .
- 6. After srolling down the script a little bit we’ve noticed that there’s an evil scammer that wanted to share the result with us I mean steal it . All we have to do now is change the e-mail to our own email again . Now the Hacker will have to crypt his scam against the online filters there’s many method that can be used like the homograph attack that consists changing letters like « a » with the cyrilic letter other than latin ones . You can have some information about it from here : http://en.wikipedia.org/wiki/IDN_homograph_attack Or the hacker can download a crypted scam with making sure that there’s no emails hidden in it . This is not the only possible way there are many many other ways like base64 encoding … In this step , the hacker have to upload his scam . So he will hack a website , spawn a shell then upload his scam . In the same time he will need to send a fake e-mail with the company mail and name without forgetting to use a very attractive title and letter to make the recipient sure about the source of the message . Letter Example :
- 7. This is an example of a letter with a hypertext link reffering to the phishing website . To spam the hacker will have to use an Inbox SMTP account and a tool providing him the mass mailing technique . After a day or two , the result should arrive to the hacker indicated e-mail . Can I Spam For Free ? Yes , it is possible . But it needs more hard work because getting an SMTP account isn't that easy these days . Free.fr company has forbidden to its SMTP accounts the send of emails containing suspicious source emails, titles & content . Or you can just try to program your own php mailer or download it from the net and try it on different servers until you get an Inbox one or just hack an SMTP account from a remote server . But , there's a lot of companies providing SMTP accounts for low pricing , so it wouldn't ve free for you if you're not very familiar with hacking . Statistics : You can find some interesting statistics about spamming in 2012 here :
- 8. https://www.trustwave.com/support/labs/spam_statistics.asp Thanks for your time reading this paper . /Souhail Hammou