Joe-job是什么
发布时间:2013-12-30 17:12:25
这个词来源于Joe的CyberPost(joes.com)的所有者Joe Doll所受到的一次袭击。Doll的网站起源于1994年,它向任何遵守其规定的规则的人免费提供Web页面,这些规则包括了“当宣扬你的网页时要有好的网络礼节”。在1996年,他其中的一个免费页面用户向许多USE-NET新闻组发送了大批未请求的消息。当这个用户被质问时,他宣称自己没有意识到自己的这种行为违反了Doll的规则。后来不久,又是这个人通过垃圾邮件的行为来宣扬他们的网页,然后Doll就终止了这个用户的账号。接收到该活动邮件的人中的一个以威胁,邮件****的形式进行报复,并且还伪造消息,使其看起来像是来自于Doll,然后再发出这些垃圾邮件。收到伪造e-mail信息的人就相信了是Doll发送了这封垃圾邮件,然后就以袭击joes.com以及使Joe的CyberPost瘫痪十几天来报复。
A joe job is a spamming technique that sends out unsolicited e-mails using spoofed sender data. Early joe jobs aimed at tarnishing the reputation of the apparent sender or inducing the recipients to take action against him (see also e-mail spoofing), but they are now typically used by commercial spammers to conceal the true origin of their messages.
Origin and motivation
The name "joe job" originated from such a spam attack on Joe Doll, webmaster of Joe's Cyberpost. One user's joes.com account was removed due to advertising through spam. In retaliation, the user sent another spam with the "reply-to" headers forged to make it appear to be from Joe Doll.[1] Besides prompting angry replies, it also caused joes.com to fall prey to denial-of-service attacks that temporarily took the web site down, from antispam vigilantes who thought he had sent the email.
Some e-mail joe jobs are acts of revenge like the original, whether by individuals or by organizations that also use spam for other purposes. Spammers use the technique to cycle through domains and try to get around spam filters and blocks.
Joe-jobbers could also be businesses trying to defame a competitor or a spammer trying to harm the reputation of an anti-spam group or filtering service. Joe job attacks in other media are often motivated politically or through personal enmity.
Form
Joe jobs usually look like normal spam, although they might also disguise themselves as other types of scams or even as legitimate (but misdirected) messages.
Joe jobbing (or "joeing") can take different forms, but most incidents involve either e-mail or Usenet. They are sometimes seen on instant messaging systems as well. In general, joe jobbing is seen only on messaging systems with weak or no sender authentication, or where most users will assume the purported sender to be the actual one.
If the joe-jobber is imitating a normal spam, it will simply advertise the victim's product, business or website. It may also claim that the victim is selling illegal or offensive items such as illegal drugs, automatic weapons or child pornography to increase the likelihood that the recipient will take action against the victim.
When imitating a scam, such as a Nigerian scam, or phishing scheme, the e-mail will still feature links to the victim's website or include contact information. In these instances, the joe-jobber is hoping that the recipient will notice the e-mail is fake, but mistakenly think the victim is behind the "scam".
When imitating a legitimate e-mail, the joe job will usually pose as an order confirmation. These "confirmations" may ask for credit card information, in which event the attack differs from phishing only in intent, not methodology, or simply imply that the recipient has already bought something from the store (leading the recipient to fear his credit card has already been charged). Like the "normal spam" jobs, these e-mails will often mention illegal activities to incite the recipient to angry e-mails and legal threats.
Another joe-job variation is an e-mail claiming that the victim offers a "spam friendly" web host or e-mail server in the hope of further inciting action against the victim by anti-spam activists.
How it works
Joe jobs often intend to capitalize on general hatred for spam. They usually forge "from" addresses and email headers so that angry replies are directed to the victim. Some joe job attacks adopt deliberately inflammatory viewpoints, intending to deceive the recipient into believing they were sent by the victim. Joe job victims may lose website hosting or network connectivity due to complaints to their Internet service providers, and even face increased bandwidth costs (or server overload) due to increased website traffic. The victim may also find his or her email blacklisted by spam filters.
Unlike most email spam, the victim does not have to "fall for" or even receive the email in question; the perpetrator is using innocent third parties to fuel what essentially amounts to slander combined with a denial of service attack.
Joe-job-like automated spam
False headers are used by many viruses or spambots today, and are selected in a random or automated way, so it is possible for someone to be Joe Jobbed without any human intent or intervention.[2]
本文由163企业邮箱首选网易品牌(http://www.hb-163.com/)原创编辑,转发请注明来源及版权归属。
原文分享地址:http://www.hb-163.com/news/antispam/1037.html
上一篇:SMTP状态码
下一篇:如何架设一个简易的实时黑名单服务器
Tags:Joe-job
相关文章
- 反垃圾来源认证之(一) SPF--Sender Policy Framework2013-12-30
- 反垃圾来源认证之(二) DKIM(domainkey)2013-12-30
- 反垃圾来源认证之(三)DMARC2013-12-30
- 国外发垃圾邮件省份2013排行榜 河北成为垃圾邮件国内最大源头2013-12-30
- 网易邮箱反垃圾十六年2013-12-30
- 国家计算机病毒应急处理中心发布恶意邮件预警通告2013-12-30
- 《加强网络信息保护的决定》规定未经用户许可不得向其手机或电子邮箱发送商业信息2013-12-30
- 如何架设一个简易的实时黑名单服务器2013-12-30