Share

Aditya K Sood

Job title:
Founder , SecNiche Security

Areas of expertise:
Penetration testing, reverse engineering, security research

Biography:
Aditya K Sood is a Sr. Security Researcher at Vulnerability Research Labs (VRL), COSEINC. He has been working in the security filed for the past 7 years. He is also running an independent security research arena, SecNiche Security. He is an active speaker at security conferences and already has spoken at EuSecWest, Xcon, Troopers, Owasp, Xkungfoo, CERT-IN etc. He has written a number of whitepapers for Hakin9, Usenix, Elsevier and BCS. He has released a number of advisories to forefront companies. Besides his normal job routine he loves to do a lot of web based research and designing of cutting edge attack vectors.

Tag Cloud

Bloggers

Blog

Dedicated Spamming - NING House of Hackers Network

The internet world has become a playground for spammers. Every day there is a new attack pattern. You will find one or another social networking website facing this problem. The reason for this trend is the centralised working of these websites. The interconnection among identities have helped the spammers to trigger attacks in a more diversified manner.

Even the hackers social netwokring websites are prone to this. The latest example is the house of hackers on ning network. The spammer used a fake identity with the name of Miss Jane and posted a 'discover love' message. On the generic benchmarks, it looked like spam. You can have a look at the profile yourself:

Users has to be smart enough to judge the pattern so as to not fall into the trap. This is possible only if one can anlyzs the parameters effectively. The specific points that have been analysed are mentioned below:

  • The spamming is done on a number of interconnected profiles with the same content.
  • The time interval used in posting the messages is 3-5 seconds, which gives an indication of some rogue activity taking place in the background.
  • The identity itself looks ambiguous.
  • The spammer uses the logic of dedicated spamming after blacklisting certain identities on the network.

To combat these attacks, one needs to be sure about what to click on - and what not to click on.

Posted 11/12/2009 by Aditya K Sood

Tagged under:WEB,Spamming,Ning,hackers,spam

Comment on this blog

You must be registered and logged in to leave a comment about this blog.