New Spam Attack

Monday, June 15th, 2009 at 2:34 pm by Maja Williams

Last week saw one of the largest spam attacks ever to be launched from a single IP address. Be aware, if you have had an email from somebody called Katty Blackyard from a very interesting email address: katty@ds4ns1ns2.cn you have been spammed! Do not answer it nor open it. The IP address that this user is using is: 89.28.14.35 and it comes from Moldova, part of former Russian empire (long time ago!). The message comes in various forms, last week it might have come to your email boxes as:

Hi, very nice post. I have been wonder’n bout
this issue, so thanks for posting

This week, it might have been:

Hi, interest post. I’ll write you later about
few questions!

There are few more names associated with this IP address, some of them beeing  JaneRadriges, KoLoBoToNoK, BritneyLohhans, AndrewBoldman, Kelly Brown, FinalosFalosus, HrymonHyrnos, SaaiskeftRet, PiaasikHuisaka, JanHusyanB, HertyPolske, NilsVartkols, UngartBaslow, HenryFertront, ChuchBerwons, KrisBelews, HilsonBendt, CreditCardsOffers, PivoLiub and (latest one) Dmitri Gromov. Let me know if you find any more:)

The domain that is listed in the email as “ds4ns1ns2.cn” does not actually belong to the IP address listed, it has been faked. Nearly all spam contains from-addresses that are either made up completely or else stolen from strangers. You can read about this here on the SpamCop Wiki.

Fortunatelly, there is nothing malicious in the email that can harm your computer, just delete the email and it should sort you out. This kind of email was sent to simply bring the internet down, or at least to slow it down as much as possible. If you get this email as a comment on your website, please do not publish or approve this comment as this might identify you as a future target for more spam attacks.

What to do about it: There are some basic things you can do to reduce the amount of spam on the internet… When you get a message that is a petition with ‘millions/thousands have signed it, please help us to free somebody/find somebody etc’, in 99.9% of cases it is a spam. A message written by a somabody who was paid to increase the amount of traffic to a certain website or simply to increase the amount of traffic on the internet would look most possibly like that. A message that ‘you need to forward to 10 of your friends or else…’ Do you really think that a computer will send you a misfortune?!? All those are spam messages that are malicious and threten to bring the Internet down. A simple step that anybody can do is not to respond to those kind of messages and not to forward email to hundreds of their friends.

What if the email is genuine, you ask? If you think that it is genuine, you can always check. Go to google, yahoo, aol, whatever you use to surf the net and search for the event described in your email. Or a message that you “need to forward” to hundreds of your friends. Most of the times, if it is a spam, the search engine will find a blog that will define it as a spam.

If you do have any issues, contact your websmater, ISP provider or do search on the various forums.

Share this article:
  • Digg
  • del.icio.us
  • Ping.fm
  • LinkedIn
  • Facebook
  • Sphinn
  • Mixx
  • Google Bookmarks
  • NewsVine
  • Reddit
  • Technorati
  • Slashdot
  • Netvibes
  • StumbleUpon
  • Live
  • Netvouz
  • Faves
  • Gwar
  • MySpace
  • Yahoo! Buzz

Categories: Articles, Business, Maja Williams, News

Maja Williams has written 12 articles.

Other articles by this author Maja Williams

6 Comments to “New Spam Attack”

Leave a Reply

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>