Odd tor spam
Marco Bonetti
marco.bonetti at slackware.it
Thu Sep 6 12:52:53 UTC 2007
hi all,
I've just received a really odd spam which try to "educate" to the use of
tor as an attack vector.
Here's the body of the mail (turn off javascript before trying to visit
that link ;-) ):
-8<-8<-8<-
Do you trade files online? Then they will come after you. Read the news on
RIAA and what they are doing to everyone they find. Tor will keep them
from finding you. Keep the internet private and down load our program for
free. <a
href="http://69.255.111.145/">Download Tor</a>
-8<-8<-8<-
A quick "strings" on their version of tor.exe shows something like
"RealShellExecuteA" and similar stuff.
ciao
--
Marco Bonetti
Slackintosh Linux Project Developer: http://www.slackintosh.org
Linux-live for powerpc: http://www.slackintosh.org/pub/rsync/mb/linux-live
My webstuff: http://sidbox.homelinux.org
My GnuPG key id: 0x86A91047
More information about the tor-talk
mailing list