Blank emails-- what are these

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I keep getting about 2-4 blank emails each day.

The "to" part always says ; undisclosed-recipients.

The "from" part keeps varying (eg:  nakanoyusuf@absolute-net.com)

The email is always blank. I doubt if it is virus related, but what is the
purpose?? Is it to test if mm email address is a valid one (if so, how do
they know -- is it just that it doesn't bounce back??).

Anyone know?

MB



Re: Blank emails-- what are these


| I keep getting about 2-4 blank emails each day.
|
| The "to" part always says ; undisclosed-recipients.
|
| The "from" part keeps varying (eg:  nakanoyusuf@absolute-net.com)
|
| The email is always blank. I doubt if it is virus related, but what is the
| purpose?? Is it to test if mm email address is a valid one (if so, how do
| they know -- is it just that it doesn't bounce back??).
|
| Anyone know?
|
| MB
|

The only think that is really annoying about them is there isn't enough content
for a
regular expression filter to auto-delete them !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Blank emails-- what are these

But what is the purpose??
Spam??

Mel
Quoted text here. Click to load it



Re: Blank emails-- what are these

MZB wrote:

Quoted text here. Click to load it

I think they are the result of a bad programming job on a new spam
trojan robot. It creates a header, puts something in the BCC:, but
neglects the body and subject.

--
   -bts
   -Warning: I brake for lawn deer

Re: Blank emails-- what are these


Quoted text here. Click to load it

They seem to be just empty smtp envelopes without any headers other
than Received and Return-Path headers added by servers.

If you can filter on the entire header block, this regex should
help:  ^(From|Sender):\s

RFC 2822 specifies that e-mails must have at least one of those two
headers, so that regex should match all legitimate mail while not
matching the blank ones.  Depending on the regex engine's settings,
^ may or may not match the beginning of a line in the middle of the
header block.  If it doesn't, (?m) should force it, at least for
PCRE.  (?m)^(From|Sender):\s

Please do test this before really using it -- ATM, I don't have any of
the little spams to test it on.

--
Q

Site Timeline