Spam in many flavors

Filed Under: SophosLabs

Today was an interesting day as far as spam goes. Normally when we see a stock pump-and-dump campaign, it will be in a single form, whether that is stock in a text/plain message, or in an attached image.

Today on the other hand we saw 4 different variations of the same stock ticker SREA being pushed out at the same time. They were in text/plain format, attached jpeg/gif images, and one of the newer methods, PDF format.

All the images are highly randomized not only in width and height, but also in text, colours, and random pixels added throughout the images. PDF files seems to be a more recent spam trend and in this campaign they're simply taking the randomized images and embedding them in the PDF files.

PDF Version

pdf version

GIF Version
gif version

JPG Version
jpg version

Text Version
text version

You might like