Advertisement
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
Spammers use Word files to bypass filters

By Munir Kotadia, ZDNet Australia
August 24, 2006
URL: http://www.zdnet.com.au/news/security/soa/Spammers-use-Word-files-to-bypass-filters/0,130061744,139267487,00.htm


As spam filters get better at weeding out unwanted messages, spammers have started inserting their messages inside Microsoft Word documents and attaching them to e-mails.

On Thursday, content security specialists Marshal warned users to beware of Word documents attached to e-mail messages. Unlike executable files, Word documents are commonly exchanged via e-mail and are usually ignored by spam filters.

Bradley Anstis, director of product management for Marshal, told ZDNet Australia that spammers have traditionally avoided sending unwanted messages in a Word -- or similar document -- file because the message sizes are relatively large.

"Most word processors today [can open Word Documents] and historically it hasn't been like that. That is one reason. Secondly, a Word document adds a size and complication to the e-mail going out, which is probably the bigger reason why they have stayed away from this area in the past," said Anstis.

According to a Marshal advisory, the e-mails use a combination of obfuscation and social engineering to create a message that "looks like a typical business e-mail".

"Users open the document expecting to find an invoice or purchase order and instead find a spam message," the advisory said.

Since August 17, Marshal has identified more than 100 examples of this new strain of e-mail spam.


Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved.
ZDNET is a registered service mark of CBS Interactive. ZDNET Logo is a service mark of CBS Interactive.