New spam for breakfast

I received an interesting piece of spam this morning. It came among the usual flurry of easily filtered spam, which is composed mainly of people trying to do SEO (search engine optimization) to get their hits up at the top of the search engine results.   That is to say, it mostly consists of a bogus comment and a link to something like an online pharmacy.

This morning, the link was a surprise…  check it out:

Author : Jaelyn (IP: 173.230.129.176 , li169-176.members.linode.com)
E-mail : www.droman827@misterpaws.net
URL    : http://www.bing.com/
Whois  : http://whois.arin.net/rest/ip/173.230.129.176
Comment: I'm not easily irpemssed but you've done it with that posting.

You’ll notice the usual typo in the comment, which is supposed to help it get past the filters, which it did in this case, but more surprisingly, the IP actually traces back to someone’s web page – just a random blog. My guess is that the computer hosting that blog has a virus which is pumping out the spam.

The most unusual thing about this is that it’s actually promoting bing.com,

  1. the web site it’s promoting is bing.com.
  2. If it is a virus promoting it, it’s almost guaranteed to be running on a Microsoft computer.

If I were into conspiracy theories, I’d wonder if Microsoft has now taken to paying virus creators to promote it’s web site using viruses that target Microsoft computers.

Yeeeesh.  Even Microsoft couldn’t sink that low…  but really, I would like to know who is behind this campaign.  Promoting bing through spam comments is already pretty despicable – but not something I’d put beyond Microsoft.

Leave a Reply

Your email address will not be published. Required fields are marked *