January 08, 2004
Latest spam trick
Posted by Brewmonkey at 12:57 PMTrackBack
Spammers are starting to send attachments similar to the following, which I've modified slightly to proctect those who want to copy it to a html file and run it:
<script language="JavaScript">
queasy = new Array(248,
229,182,62,124,151,35,197,96,45,127,
170,12,223,11,205,200,112,247,23,1,
57,182,203,248,165,199,190,9,36,223,
193,25,175,48,54,246,251,235,220,212,
103,186,168,199,175,18,194,58,137,207,
97,241,194,107,205,160,136,34,207,172,
65,44,184,171,26,213,68,222,10,143,
252,117,75,149,216,37,204,169,233,209,
164,234,206,141,30,31,246,27,250,111,
3,15,219,124,132,101,166,195,126,164,
83,88,122,237,220,184,230,139,184,64,
48,133,209,18,187,36,107,166,176,161,
157,147,103,164,198,162,253,73,239,17,
188,182,125,205,243,2,239,204,212,38,
210,191,95,43,181,231,8,204,71,149,
27,204,177,85,67,218,210,103,212,180,
167,214,175,171,218,145,22,66,137,74,
160,124,11,85,159,104,147,99,163,157,
111,247,0,20,57,174,211,233,180,153,
190,88,18,250,254,103,198,98,111,241,
169,230,221,217,35,167,233,192,181,18,
215,110,210,221,52,183,142,16,252,141,
198,35,213,183,66,59,250,235,3,199,
74,222,10,129,226,51,122,207,158,59,
199,243,183,128,184,167,204,213,16,6,
153,22,172,111,6,14,216,41,130,62,
166,199,123,164,85,6,33,232,134,163,
231,197,249,70,25,243,229,97,177,109,
50,174,181,161,223,130,72,144,247,135,
137,50,234,24,195);
Freemason = new Array(196,
173,226,115,48,169,46,207,92,101,58,
235,72,225,6,199,244,29,146,99,96,
25,222,191,140,213,234,219,120,81,182,
183,36,141,66,83,144,137,142,175,188,
69,154,203,168,193,102,167,84,253,242,
67,192,249,62,159,236,181,74,187,216,
49,22,151,132,109,162,51,240,105,238,
143,28,37,250,171,8,161,198,135,180,
221);
abreactions = 296;
catapult = 82;
var Pittsburgh = "";
for(determinants = 0; determinants < abreactions; determinants++)
{
checkString = String.fromCharCode(queasy[determinants] ^ Freemason[determinants % catapult])
if(checkString == "<")
{
checkString = "<"
}
else if (checkString == ">")
{
checkString = ">"
}
Pittsburgh = Pittsburgh + checkString;
}
document.write(Pittsburgh);
</script>
The out ends up like this:
<HTML> <HEAD> <meta http-equiv="refresh" content="1;URL=http://www.casinos-money.com/
_553f504eca7c608c3c43ac8a3f66f869/2/"> </HEAD> <p align="center">
If your browser do not redirect please CLICK <a href="http://www.casinos-money.com/
_553f504eca7c608c3c43ac8a3f66f869/2/">
HERE</a></p> </HTML>