[Mimedefang] new obfuscation

Joseph Brennan brennan at columbia.edu
Tue Feb 17 11:23:11 EST 2004


New obfuscation type.  Actually one very long line, broken
here for legibility:


We c<a href="http://www.harmony.tv"></a>an
g<a href="http://www.sapsucker.info/7/quartz.htm"></a>et
yo<a href="http://www.gangster.net"></a>u

...and so on.

It uses correctly formatted real URLs to obfuscate the text.

Thread on news.admin.net-abuse.email, "Hashbusting using valid URLs
and HTML tags"


Joseph Brennan
Academic Technologies Group, Academic Information Systems (AcIS)
Columbia University in the City of New York




More information about the MIMEDefang mailing list