Poppa’s got a brand new bag, and spammers got a brand new ploy.

This one, interestingly enough, is being attributed to spammers’ concerns over running afoul of CAN-SPAM, and so trying to end run it instead. Specifically, it is claimed, they are trying to avoid the stiff penalties which can be associated with sending email and using a misleading or flat-out bogus domain in the “from” information.

The way it works is this: The spammer sends out a spam run of however many thousands of pieces of spam, late in the middle of the night, “from” a domain that they are just about to really register themselves, but have not yet done. In the morning they register the domain. This gives the spam time to get out before the domain can get shut down, then the domain comes online, and is a real domain. The thought is…

[Continue reading New Spam Tactic Wreaks Havoc With DNS]