<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>

<channel>
	<title>Spamhuntress</title>
	<atom:link href="http://spamhuntress.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://spamhuntress.com</link>
	<description>writes on spam and admin issues</description>
	<pubDate>Sun, 19 Apr 2009 20:56:27 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>MSN worm making rounds?</title>
		<link>http://spamhuntress.com/2009/04/19/msn-worm-making-rounds/</link>
		<comments>http://spamhuntress.com/2009/04/19/msn-worm-making-rounds/#comments</comments>
		<pubDate>Sun, 19 Apr 2009 20:48:08 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Parasites]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/?p=908</guid>
		<description><![CDATA[I&#8217;ve had three messages from friends on MSN the last two days that weren&#8217;t actually from them. They were all Norwegian nationals, and were unlikely to write to me in English. And they certainly were unlikely to &#8220;cold call&#8221; links to dodgy sites.
Most likely there&#8217;s a form of MSN worm making the rounds in Norway [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2009/04/19/msn-worm-making-rounds/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Facebook viral group spam</title>
		<link>http://spamhuntress.com/2009/03/10/facebook-viral-group-spam/</link>
		<comments>http://spamhuntress.com/2009/03/10/facebook-viral-group-spam/#comments</comments>
		<pubDate>Tue, 10 Mar 2009 18:21:20 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Social networking spam]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/?p=903</guid>
		<description><![CDATA[Spammers appear to have set their sights on Facebook for spamming purposes. But since outgoing links have rel nofollow, it&#8217;s no good for Googlejuice. So let&#8217;s examine an actual example of a group set up for spam purposes:
http://www.facebook.com/group.php?gid=56828903531
It&#8217;s a group touting something called ProfileLock. Problem is, there&#8217;s no such thing. It&#8217;s just a clever second [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2009/03/10/facebook-viral-group-spam/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Dot Net Nuke hacking</title>
		<link>http://spamhuntress.com/2009/03/03/dot-net-nuke-hacking/</link>
		<comments>http://spamhuntress.com/2009/03/03/dot-net-nuke-hacking/#comments</comments>
		<pubDate>Wed, 04 Mar 2009 01:16:54 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/?p=898</guid>
		<description><![CDATA[These are the least likely to be spotted hackings I&#8217;ve ever seen.
Andrew Jensen commented on a post, leaving this case story of a Dot Net Nuke hacking.
I checked into some sites that had been hacked, and here&#8217;s what I found (and do read his post first):
One one site, the hacked links were inserted into the [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2009/03/03/dot-net-nuke-hacking/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Hacked Joomla site</title>
		<link>http://spamhuntress.com/2009/02/26/hacked-joomla-site/</link>
		<comments>http://spamhuntress.com/2009/02/26/hacked-joomla-site/#comments</comments>
		<pubDate>Thu, 26 Feb 2009 22:45:29 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Parasites]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/?p=892</guid>
		<description><![CDATA[I came across a hacked site today. Turns out it was based on an older version of Joomla. That MIGHT be where the hackers got in, but not necessarily. I checked on that site a few weeks ago (there&#8217;s actually still a Google cache from back then, Jan 20, 2009), and back then I first [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2009/02/26/hacked-joomla-site/feed/</wfw:commentRss>
		</item>
		<item>
		<title>MyDailyFlog sends deceptive invites</title>
		<link>http://spamhuntress.com/2008/12/20/mydailyflog-sends-deceptive-invites/</link>
		<comments>http://spamhuntress.com/2008/12/20/mydailyflog-sends-deceptive-invites/#comments</comments>
		<pubDate>Sun, 21 Dec 2008 01:51:10 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Social networking spam]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/?p=883</guid>
		<description><![CDATA[There&#8217;s a guy in my &#8220;network&#8221; who keeps on joining one network after another. And he always sends me invitations. They go straight in the &#8220;half spam&#8221; bucket.
The latest invitation piqued my curiosity. It was from mydailyflog.com, and it said:
Hi!
I would like to invite you to visit MyDailyFlog and see my latest photos.
And then the [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2008/12/20/mydailyflog-sends-deceptive-invites/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Hacked vacation responses</title>
		<link>http://spamhuntress.com/2008/12/15/hacked-vacation-responses/</link>
		<comments>http://spamhuntress.com/2008/12/15/hacked-vacation-responses/#comments</comments>
		<pubDate>Tue, 16 Dec 2008 00:31:47 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Mail spam]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/2008/12/15/hacked-vacation-responses/</guid>
		<description><![CDATA[I&#8217;ve sent out a few newsletters recently, and got one reply that raised my suspicions. It was a vacation reply that hawked a website, and it looked like spam. Although I don&#8217;t know the person who owns the e-mail address, I suspect she was hacked, and somebody turned on her vacation response and filled it [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2008/12/15/hacked-vacation-responses/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Estdomains history</title>
		<link>http://spamhuntress.com/2008/12/01/estdomains-history/</link>
		<comments>http://spamhuntress.com/2008/12/01/estdomains-history/#comments</comments>
		<pubDate>Mon, 01 Dec 2008 12:05:37 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Preachy]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/2008/12/01/estdomains-history/</guid>
		<description><![CDATA[Estdomains, home to lots of spam domains, is now history. Good riddance!
]]></description>
		<wfw:commentRss>http://spamhuntress.com/2008/12/01/estdomains-history/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Swedish domain names hijacked</title>
		<link>http://spamhuntress.com/2008/11/29/swedish-domain-names-hijacked/</link>
		<comments>http://spamhuntress.com/2008/11/29/swedish-domain-names-hijacked/#comments</comments>
		<pubDate>Sat, 29 Nov 2008 23:37:16 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Search engine spam]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/2008/11/29/swedish-domain-names-hijacked/</guid>
		<description><![CDATA[I wrote a while ago about a network of pages with fake biographies generated from a database and a script. Well, Phonera/Port80 has upped the ante.
Now they&#8217;ve created fake descriptions of Swedish domain names (yes, existing ones) on the same network of IP addresses. The net result is that those fake pages rank well if [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2008/11/29/swedish-domain-names-hijacked/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Cookie stuffing images on forums</title>
		<link>http://spamhuntress.com/2008/11/26/cookie-stuffing-images-on-forums/</link>
		<comments>http://spamhuntress.com/2008/11/26/cookie-stuffing-images-on-forums/#comments</comments>
		<pubDate>Wed, 26 Nov 2008 11:16:35 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Forum spam]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/2008/11/26/cookie-stuffing-images-on-forums/</guid>
		<description><![CDATA[I got an e-mail from a forum owner, asking about a particular behavior on his forum.
Several people had signed up for accounts and were posting low content posts on lots of threads. Looked like just another &#8220;me too&#8221; type poster until they saw a broken image link in edit view. The image didn&#8217;t show up [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2008/11/26/cookie-stuffing-images-on-forums/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Redirects in webspam</title>
		<link>http://spamhuntress.com/2008/11/24/redirects-in-webspam/</link>
		<comments>http://spamhuntress.com/2008/11/24/redirects-in-webspam/#comments</comments>
		<pubDate>Mon, 24 Nov 2008 19:06:15 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Redirects]]></category>

		<guid isPermaLink="false">http://spamhuntress.com/2008/11/24/redirects-in-webspam/</guid>
		<description><![CDATA[I haven&#8217;t blogged much about webspam lately. Akismet kills most of it, so I&#8217;m not as annoyed.
But enter a new Wordpress installation. It took a few week for the first spam to arrive, and then I attracted a regular. Geez, that&#8217;s annoying. I hadn&#8217;t had time to do something about the spam yet, but it [...]]]></description>
		<wfw:commentRss>http://spamhuntress.com/2008/11/24/redirects-in-webspam/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
