Comments on: Are you getting a lot of stock-related spam on Gmail lately?

Question: Are you getting a lot of stock-related spam on Gmail lately?

LondonYank — Wed, 13 Apr 2005 04:35:59 -0800

In the last couple of weeks Gmail's normally-astute spam filtering has totally given up the ghost in one specific area: stock spam. It seems like every single stock spam slips past the filter and ends up in my inbox. At the moment every other time I get a new email it comes with a subject like "Leading auth0rity On l0w priced st0cks". Anyone else having the same issue? Has Gmail's spam filter started to show cracks?

By: NeonSurge

NeonSurge — Wed, 13 Apr 2005 04:45:11 -0800

It's not just Gmail. I've been flooded with these bloody stock spams on all my email accounts over the past couple of weeks (including my work account which is "protected" by two different filters). Maybe some spammer has discovered a new method of bypassing filters...

By: sebas

sebas — Wed, 13 Apr 2005 05:25:04 -0800

Yeah, all these 'An exciting cOmpany f0r investOrs' emails are invading my work email as well. It is kind of hard to filter out I assume. They mention a lot of business buzz words like VoIP, which are very valid terms in a lot of my emails.

By: smackfu

smackfu — Wed, 13 Apr 2005 07:15:49 -0800

Seeing it here too. Today it's nine copies of: "Stock Watch Alert" this morning are Wysak Petroleum (WYSK), Key Energy Services, Inc. (Pink Sheets: KEGS), Medify So|utions (MFYS), Sequoia Interests Corporation (SQNC).

By: sbutler

sbutler — Wed, 13 Apr 2005 07:21:48 -0800

Count me in also. It's been getting by my SpamAssassin install something fierce lately. I figured I had just screwed up the configuration... I guess not.

By: gi_wrighty

gi_wrighty — Wed, 13 Apr 2005 07:28:34 -0800

I think it's because they're sending multi-part mime emails, with the plain-text part being something benign, most likely copied from a news site, and the html part being the actual ad. The spam filter passes the email based on the plain-text part but your mail client displays the html part.

By: blag

blag — Wed, 13 Apr 2005 07:30:13 -0800

Yes, same here. In fairness, I can imagine that it would be difficult to spot these via heuristic scanning - they're very long and don't contain any of the normal 'red flag' attributes - embedded images, URLs with strings of digits etc. Gmail's spam filter is doing better than SpamAssassin, though - any ideas why?

I guess the purpose of these is to artificially inflate stock value - is there not a remedy under SEC (?) regulations?

On preview: gi_wrighty: aaah. clever. sortof.

By: NeonSurge

NeonSurge — Wed, 13 Apr 2005 07:42:42 -0800

There's no HTML in any of the spams I've received. They all seem to follow the same basic pattern in replacing some (but not all) lowercase "L"s with the pipe symbol:

The Oi| and Gas Advisory Now that Oi| and Gas has entered a |ong-term bu|| market, our specia|ty in pinpointing the hottest companies of the few remaining underva|ued energy plays has produced soaring returns. Emerson Oi| and Gas (EOGI) is an energy developer in the US "Oi| Be|t"
and in Canada's most high|y coveted reservoirs with generating potential of Mi||ions per week.

By: tdismukes

tdismukes — Wed, 13 Apr 2005 09:50:32 -0800

I just started getting these within the last week, at an email address where I've never gotten spam before. Now I'm getting a dozen or more per day. They're pretty obviously all from the same source, even though the return addresses are forged. Spam Assassin is marking most of them, but some still get through.

I kind of wonder what the actual purpose is, aside from harassing random people. Does anyone actually pay attention to these, other than to delete them?

By: suitcase

suitcase — Wed, 13 Apr 2005 10:18:27 -0800

http://www.sec.gov/answers/pumpdump.htm

By: scazza

scazza — Wed, 13 Apr 2005 15:40:55 -0800

I use Mutt and Spam Assassin for my email and have been getting 5-10 stock spams a day. Most of them haven't even altered their spellings to include numbers in the words, and everything seems to get through. I assume that Gmail and Spam Assassin alike are working on this.

By: mosch

mosch — Wed, 13 Apr 2005 22:23:18 -0800

This type of thing is extremely common. The smarter spammers (thankfully there aren't many) tune their messages to avoid detection by common spam filters. Once they succeed, you'll tend to get a large number of these particular messages until the spam filters then adapt.

Gmail really doesn't do anything revolutionary when it comes to spam filtering, at least is as detectable in a black box analysis of the service. It's good work, but the fact remains that stopping spam is not a simple matter, and that real messages flagged as spam are a far more serious problem than one or two spams a day, flagged as real.

Now if only I could stop the stock scam faxes, I'd be a happy man.

By: LondonYank

LondonYank — Thu, 14 Apr 2005 01:56:00 -0800

I kind of wonder what the actual purpose is, aside from harassing random people. Does anyone actually pay attention to these, other than to delete them?

Can't that be said of pretty much all spam? I mean, who actually goes for the P3n1s enlargement offers or 0nl1ne Ph@arm@cy links?