DSNに偽装したspam
昨日届いたUCE1. Return-Path: <foo@example.jp> Received: from host-213-136-112-18.afnet.net (host-213-136-112-18.afnet.net [213.136.112.18]) by mail.example.jp (mail.example.jp) with SMTP id D0E565756E0 for <foo@example.jp>; Fri, 5 Dec 2008 19:58:17 +0900 (JST) To: <foo@example.jp> Subject: Delivery Status Notification (Failure) From: <foo@example.jp> MIME-Version: 1.0 Importance: High Content-Type: text/html Message-Id: <20081205105817.D0E565756E0@mail.example.jp> Date: Fri, 5 Dec 2008 19:58:17 +0900 (JST) <!DOCTYPE HTML PUBLIC “-//W3C//DTD HTML 4.0 Transitional//EN”> <HTML><HEAD> <META http-equiv=Content-Type content=“text/html; charset=iso-8859-1”> </HEAD><BODY><a href=“example.com” target="_blank"><img src=“http://example.com/smbid.jpg” border=0 alt=“Click to visit Official Web Site!"></a></BODY></HTML> メイルを送ってもいないのにsubjectが"Delivery Status Notification"なのでbackscatterかと思ったが,1通しか届いていないし,subjectと本文内に書かれているURLだけが異なるUCEも届いたので,適当にsubjectを選んでいるだけのbotのようだ. ...