You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jeff Moss <jm...@Huffmancorp.com> on 2006/11/17 16:44:36 UTC
I've got TORA.08 spelled with numbers?
I'm getting a bunch of spams this morning that have
TORA.08 spelled out with numbers like this.
4216775 0611576 215556 7 3308011 3258576
6 7 5 1 5 3 8 5 2 7 3
8 3 6 5 0 4 1 2 7 0 5
7 2 2 257873 5 7 4 1 3387715
6 2 5 7 1 111500075 8 6 2 2
8 2 2 7 7 3 2 656 0 3 0 8
0 6430533 4 4 8 6 207 5412501 7637213
Does anybody know what this is about.
Regards
Jeff Moss
Re: I've got TORA.08 spelled with numbers?
Posted by Nigel Frankcom <ni...@blue-canoe.net>.
On Fri, 17 Nov 2006 17:09:21 +0100, "Giampaolo Tomassoni"
<g....@libero.it> wrote:
>> From: Stuart Johnston [mailto:stuart@ebby.com]
>>
>> Evan Platt wrote:
>> > At 07:44 AM 11/17/2006, you wrote:
>> >> I'm getting a bunch of spams this morning that have
>> >> TORA.08 spelled out with numbers like this.
>> >>
>> >> 4216775 0611576 215556 7 3308011 3258576
>> >> 6 7 5 1 5 3 8 5 2 7 3
>> >> 8 3 6 5 0 4 1 2 7 0 5
>> >> 7 2 2 257873 5 7 4 1 3387715
>> >> 6 2 5 7 1 111500075 8 6 2 2
>> >> 8 2 2 7 7 3 2 656 0 3 0 8
>> >> 0 6430533 4 4 8 6 207 5412501 7637213
>> >>
>> >>
>> >> Does anybody know what this is about.
>> >
>> > Got 2 also.
>> >
>> > Wasn't there a stock image spam with TORA.TORA or something?
>>
>> AH HA! It is not a url, its a stock symbol!
>>
>> http://finance.yahoo.com/q?s=TORA.OB
>
>So, it's not 08 but OB.
>
>What does OB stands for? OBnubilated? OBfuscating? OBsessive?
>
>giampaolo
- If this is a preferred stock, the letters "PR" and the letter
denoting the class will typically be added. For example, a fictional
preferred stock called Cory's Tequila Corporate Preferred T's would
have a symbol such as CTC.PR.T.
- If the company has more than one type of stock currently trading,
then it will have the class added to its suffix. For instance,
Berkshire Hathaway comes in two forms: BRK.A and BRK.B.
- If a stock is trading on the Pink Sheets or the Over-the-Counter
Bulletin Board, a "PK" or "OB" will be added to the stock symbol.
- On the Nasdaq, a fifth symbol is added to stocks that are delinquent
in certain exchange requirements. For example, the letter "Q" will be
added to the stock symbol of a company presently in bankruptcy
proceedings.
From http://www.investopedia.com/ask/answers/03/061903.asp
Nigel
Re: I've got TORA.08 spelled with numbers? - Tora Acquires www.makeup.com
Posted by Rejaine Monteiro <re...@bhz.jamef.com.br>.
how to block this ascii art spams??
i've got many spams with this tora.ob too...
Thiago LPS escreveu:
> i've got this spam too
>
> looks like a ASCI ART with TORA writed in the body of mail...
>
> :(
>
>
>
> On 11/17/06, *qqqq* < qqqq@usermail.com <ma...@usermail.com>>
> wrote:
>
> http://biz.yahoo.com/iw/061020/0175176.html
>
>
>
> TORA TECHNOLOGIES INC.
>
> Robert E. Rook - President
>
>
>
> Contact:
> Contacts:
> Tora Technologies Inc.
> Robert E. Rook
> President
> 1-866-347-5057
>
>
>
>
>
> --
> --------------------------------------------------
> Thiago LPS
> C.E.S.A.R - Administrador de Sistemas
> msn: thiago.lps@gmail.com <ma...@gmail.com>
> 0xx 81 8735 2591
> --------------------------------------------------
Re: I've got TORA.08 spelled with numbers? - Tora Acquires www.makeup.com
Posted by Thiago LPS <th...@gmail.com>.
i've got this spam too
looks like a ASCI ART with TORA writed in the body of mail...
:(
On 11/17/06, qqqq <qq...@usermail.com> wrote:
>
> http://biz.yahoo.com/iw/061020/0175176.html
>
>
>
> TORA TECHNOLOGIES INC.
>
> Robert E. Rook - President
>
>
>
> Contact:
> Contacts:
> Tora Technologies Inc.
> Robert E. Rook
> President
> 1-866-347-5057
>
>
>
--
--------------------------------------------------
Thiago LPS
C.E.S.A.R - Administrador de Sistemas
msn: thiago.lps@gmail.com
0xx 81 8735 2591
--------------------------------------------------
Re: I've got TORA.08 spelled with numbers? - Tora Acquires www.makeup.com
Posted by qqqq <qq...@usermail.com>.
http://biz.yahoo.com/iw/061020/0175176.html
TORA TECHNOLOGIES INC.
Robert E. Rook - President
Contact:
Contacts:
Tora Technologies Inc.
Robert E. Rook
President
1-866-347-5057
Re: I've got TORA.08 spelled with numbers?
Posted by Nigel Frankcom <ni...@blue-canoe.net>.
On Fri, 17 Nov 2006 17:46:08 +0100, Charlie Clark
<ch...@begeistert.org> wrote:
>
>Am 17.11.2006 um 17:32 schrieb Nigel Frankcom:
>
>> If the company is still trading in a month I'd be surprised. I
>> wouldn't be at all surprised if it's just a shell anyway.
>>
>> Create the company, run out the spam, then shut it all down before the
>> SEC/Local Securities equivalent start the investigation.
>>
>> From the number of different companies we see in these spam it's
>> highly unlikely the SEC et al have the time or manpower to go after
>> penny ante (s'cuse the pun) stuff like this. Their concerns are angled
>> more towards the bigger, established players in the market.
>>
>> A few thousand dollars in penny stocks is a tiny drop in the ocean -
>> which is probably why it's being pushed so hard.
>>
>> IIRC someone posted a report address for the sec yesterday, a
>> concerted effort on that front might generate far more reaction that
>> talking to some sysadmin in China etc.
>
>If anyone's dumb enough to go along with these schemes then they
>deserve all that they get. But hammering the world's legitimate mail
>servers with junk (I know we've got more than enough fibre for
>probably it all) isn't on. Surely ISP's need to think of more
>effective ways of dealing with bots on their networks. Oh, but that
>would mean someone agreeing to spend time and money on effective sys
>admin. Forget I ever mentioned it!
>
>Charlie
There are always going to be 'less scrupulous' ISPs that will sell to
the spammers at premium rates. Since dealing with these ISPs and their
admins is a pointless exercise, attack them where they make their
money.
To trade these stocks the brokers must be registered; I doubt it's a
load of them, much more likely to be a small group that include a bent
broker or two. Obviously someone who understands how the markets work.
The SEC has a great deal of power to deal with people like this so
'killing off' the broker effectively cuts the head off the scheme and
would probably drastically reduce the numbers of stock scams.
The hard part will be getting the SEC et al to act in the 1st place.
Individually the losses will be minimal; aggregated they could end up
being a significant amount of money. By keeping the schemes at the
level they are, they're probably slipping under the radar for the SEC.
For all this to work the companies have to be incorporated and their
stocks registered etc. There *is* a paper trail and it's probably not
too hard to follow. But then, that's what the SEC get paid for, not
us.
Another few pennies worth from me and I'll probably have raised the
stock on one of them by a couple of percentage points :-D
Nigel
Re: I've got TORA.08 spelled with numbers?
Posted by Charlie Clark <ch...@begeistert.org>.
Am 17.11.2006 um 17:32 schrieb Nigel Frankcom:
> If the company is still trading in a month I'd be surprised. I
> wouldn't be at all surprised if it's just a shell anyway.
>
> Create the company, run out the spam, then shut it all down before the
> SEC/Local Securities equivalent start the investigation.
>
> From the number of different companies we see in these spam it's
> highly unlikely the SEC et al have the time or manpower to go after
> penny ante (s'cuse the pun) stuff like this. Their concerns are angled
> more towards the bigger, established players in the market.
>
> A few thousand dollars in penny stocks is a tiny drop in the ocean -
> which is probably why it's being pushed so hard.
>
> IIRC someone posted a report address for the sec yesterday, a
> concerted effort on that front might generate far more reaction that
> talking to some sysadmin in China etc.
If anyone's dumb enough to go along with these schemes then they
deserve all that they get. But hammering the world's legitimate mail
servers with junk (I know we've got more than enough fibre for
probably it all) isn't on. Surely ISP's need to think of more
effective ways of dealing with bots on their networks. Oh, but that
would mean someone agreeing to spend time and money on effective sys
admin. Forget I ever mentioned it!
Charlie
--
Charlie Clark
Helmholtzstr. 20
Düsseldorf
D- 40215
Tel: +49-211-938-5360
GSM: +49-178-782-6226
Re: I've got TORA.08 spelled with numbers?
Posted by Nigel Frankcom <ni...@blue-canoe.net>.
On Fri, 17 Nov 2006 09:20:39 -0700, "qqqq" <qq...@usermail.com> wrote:
>| >|
>| >| http://finance.yahoo.com/q?s=TORA.OB
>| >
>| >Trading up 4.5%!
>| >
>| >Geez...
>|
>| At a rough guess that would be 'salt' money. So when someone does
>| click on it/look it up they see rising stock and buy. Check it again
>| in a few days.
>|
>| Nigel
>
>
>Hey...there is money to be made!
>
>Let's all short TORA.OB
If the company is still trading in a month I'd be surprised. I
wouldn't be at all surprised if it's just a shell anyway.
Create the company, run out the spam, then shut it all down before the
SEC/Local Securities equivalent start the investigation.
From the number of different companies we see in these spam it's
highly unlikely the SEC et al have the time or manpower to go after
penny ante (s'cuse the pun) stuff like this. Their concerns are angled
more towards the bigger, established players in the market.
A few thousand dollars in penny stocks is a tiny drop in the ocean -
which is probably why it's being pushed so hard.
IIRC someone posted a report address for the sec yesterday, a
concerted effort on that front might generate far more reaction that
talking to some sysadmin in China etc.
Just my penny's worth ;-)
Nigel
Re: I've got TORA.08 spelled with numbers?
Posted by qqqq <qq...@usermail.com>.
| >|
| >| http://finance.yahoo.com/q?s=TORA.OB
| >
| >Trading up 4.5%!
| >
| >Geez...
|
| At a rough guess that would be 'salt' money. So when someone does
| click on it/look it up they see rising stock and buy. Check it again
| in a few days.
|
| Nigel
Hey...there is money to be made!
Let's all short TORA.OB
Re: I've got TORA.08 spelled with numbers?
Posted by Nigel Frankcom <ni...@blue-canoe.net>.
On Fri, 17 Nov 2006 09:03:54 -0700, "qqqq" <qq...@usermail.com> wrote:
>
>| > Wasn't there a stock image spam with TORA.TORA or something?
>|
>| AH HA! It is not a url, its a stock symbol!
>|
>| http://finance.yahoo.com/q?s=TORA.OB
>
>Trading up 4.5%!
>
>Geez...
At a rough guess that would be 'salt' money. So when someone does
click on it/look it up they see rising stock and buy. Check it again
in a few days.
Nigel
Re: I've got TORA.08 spelled with numbers?
Posted by qqqq <qq...@usermail.com>.
| > Wasn't there a stock image spam with TORA.TORA or something?
|
| AH HA! It is not a url, its a stock symbol!
|
| http://finance.yahoo.com/q?s=TORA.OB
Trading up 4.5%!
Geez...
RE: I've got TORA.08 spelled with numbers?
Posted by Giampaolo Tomassoni <g....@libero.it>.
> From: Stuart Johnston [mailto:stuart@ebby.com]
>
> Evan Platt wrote:
> > At 07:44 AM 11/17/2006, you wrote:
> >> I'm getting a bunch of spams this morning that have
> >> TORA.08 spelled out with numbers like this.
> >>
> >> 4216775 0611576 215556 7 3308011 3258576
> >> 6 7 5 1 5 3 8 5 2 7 3
> >> 8 3 6 5 0 4 1 2 7 0 5
> >> 7 2 2 257873 5 7 4 1 3387715
> >> 6 2 5 7 1 111500075 8 6 2 2
> >> 8 2 2 7 7 3 2 656 0 3 0 8
> >> 0 6430533 4 4 8 6 207 5412501 7637213
> >>
> >>
> >> Does anybody know what this is about.
> >
> > Got 2 also.
> >
> > Wasn't there a stock image spam with TORA.TORA or something?
>
> AH HA! It is not a url, its a stock symbol!
>
> http://finance.yahoo.com/q?s=TORA.OB
So, it's not 08 but OB.
What does OB stands for? OBnubilated? OBfuscating? OBsessive?
giampaolo
Re: I've got TORA.08 spelled with numbers?
Posted by Stuart Johnston <st...@ebby.com>.
Evan Platt wrote:
> At 07:44 AM 11/17/2006, you wrote:
>> I'm getting a bunch of spams this morning that have
>> TORA.08 spelled out with numbers like this.
>>
>> 4216775 0611576 215556 7 3308011 3258576
>> 6 7 5 1 5 3 8 5 2 7 3
>> 8 3 6 5 0 4 1 2 7 0 5
>> 7 2 2 257873 5 7 4 1 3387715
>> 6 2 5 7 1 111500075 8 6 2 2
>> 8 2 2 7 7 3 2 656 0 3 0 8
>> 0 6430533 4 4 8 6 207 5412501 7637213
>>
>>
>> Does anybody know what this is about.
>
> Got 2 also.
>
> Wasn't there a stock image spam with TORA.TORA or something?
AH HA! It is not a url, its a stock symbol!
http://finance.yahoo.com/q?s=TORA.OB
RE: I've got TORA.08 spelled with numbers?
Posted by "Suhas Ingale (QualiSpace)" <su...@qualispace.com>.
Lol....
Warm Regards,
Suhas
System Administrator
QualiSpace - A QuantumPages Enterprise
An ICANN Accredited Domain Registrar
===========================
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
===========================
For Any Technical Query Please Use: http://helpdesk.qualispace.com
QualiSpace Community Discussion forum: http://forum.qualispace.com
-----Original Message-----
From: Giampaolo Tomassoni [mailto:g.tomassoni@libero.it]
Sent: Friday, November 17, 2006 9:36 PM
To: users@spamassassin.apache.org
Subject: RE: I've got TORA.08 spelled with numbers?
> So, here is a question... Why spam everyone with TORA.08, I
> don't even know
> what the heck that means!!!
I guess it is a (japanese?) nickname.
Maybe the nickname of the bot/worm/virus maker?
It is possible that this advertising is targeted to spammers, not to "real"
customers: it looks like "Ehy, see? I can flood people's mailboxes with it!
Come and buy my services."
Ah, these business people...
giampaolo
>
>
> ----- Original Message -----
> From: "Evan Platt" <ev...@espphotography.com>
> To: <us...@spamassassin.apache.org>
> Sent: Friday, November 17, 2006 10:48 AM
> Subject: Re: I've got TORA.08 spelled with numbers?
>
>
> > At 07:44 AM 11/17/2006, you wrote:
> >>I'm getting a bunch of spams this morning that have
> >>TORA.08 spelled out with numbers like this.
> >>
> >>4216775 0611576 215556 7 3308011 3258576
> >> 6 7 5 1 5 3 8 5 2 7 3
> >> 8 3 6 5 0 4 1 2 7 0 5
> >> 7 2 2 257873 5 7 4 1 3387715
> >> 6 2 5 7 1 111500075 8 6 2 2
> >> 8 2 2 7 7 3 2 656 0 3 0 8
> >> 0 6430533 4 4 8 6 207 5412501 7637213
> >>
> >>
> >>Does anybody know what this is about.
> >
> > Got 2 also.
> >
> > Wasn't there a stock image spam with TORA.TORA or something?
> >
>
RE: I've got TORA.08 spelled with numbers?
Posted by Giampaolo Tomassoni <g....@libero.it>.
> So, here is a question... Why spam everyone with TORA.08, I
> don't even know
> what the heck that means!!!
I guess it is a (japanese?) nickname.
Maybe the nickname of the bot/worm/virus maker?
It is possible that this advertising is targeted to spammers, not to "real" customers: it looks like "Ehy, see? I can flood people's mailboxes with it! Come and buy my services."
Ah, these business people...
giampaolo
>
>
> ----- Original Message -----
> From: "Evan Platt" <ev...@espphotography.com>
> To: <us...@spamassassin.apache.org>
> Sent: Friday, November 17, 2006 10:48 AM
> Subject: Re: I've got TORA.08 spelled with numbers?
>
>
> > At 07:44 AM 11/17/2006, you wrote:
> >>I'm getting a bunch of spams this morning that have
> >>TORA.08 spelled out with numbers like this.
> >>
> >>4216775 0611576 215556 7 3308011 3258576
> >> 6 7 5 1 5 3 8 5 2 7 3
> >> 8 3 6 5 0 4 1 2 7 0 5
> >> 7 2 2 257873 5 7 4 1 3387715
> >> 6 2 5 7 1 111500075 8 6 2 2
> >> 8 2 2 7 7 3 2 656 0 3 0 8
> >> 0 6430533 4 4 8 6 207 5412501 7637213
> >>
> >>
> >>Does anybody know what this is about.
> >
> > Got 2 also.
> >
> > Wasn't there a stock image spam with TORA.TORA or something?
> >
>
Re: I've got TORA.08 spelled with numbers?
Posted by Billy Huddleston <bi...@nxs.net>.
So, here is a question... Why spam everyone with TORA.08, I don't even know
what the heck that means!!!
----- Original Message -----
From: "Evan Platt" <ev...@espphotography.com>
To: <us...@spamassassin.apache.org>
Sent: Friday, November 17, 2006 10:48 AM
Subject: Re: I've got TORA.08 spelled with numbers?
> At 07:44 AM 11/17/2006, you wrote:
>>I'm getting a bunch of spams this morning that have
>>TORA.08 spelled out with numbers like this.
>>
>>4216775 0611576 215556 7 3308011 3258576
>> 6 7 5 1 5 3 8 5 2 7 3
>> 8 3 6 5 0 4 1 2 7 0 5
>> 7 2 2 257873 5 7 4 1 3387715
>> 6 2 5 7 1 111500075 8 6 2 2
>> 8 2 2 7 7 3 2 656 0 3 0 8
>> 0 6430533 4 4 8 6 207 5412501 7637213
>>
>>
>>Does anybody know what this is about.
>
> Got 2 also.
>
> Wasn't there a stock image spam with TORA.TORA or something?
>
Re: I've got TORA.08 spelled with numbers?
Posted by snowcrash+spamassassin <sc...@gmail.com>.
> > >I'm getting a bunch of spams this morning that have
> > >TORA.08 spelled out with numbers like this.
lordy, lordy!
i'm just *SURE* i'm missing the whole point of this sort of spam ...
... but WHY do these spammers even bother with this sort of stuff?
even if it *does* temporarily get past filters -- who in their right
mind clicks on this stuff? or, worse, would send/invest $$$?
Re: I've got TORA.08 spelled with numbers?
Posted by Dan McCullough <da...@gmail.com>.
Hey I got the same thing.
On 11/17/06, Evan Platt <ev...@espphotography.com> wrote:
> At 07:44 AM 11/17/2006, you wrote:
> >I'm getting a bunch of spams this morning that have
> >TORA.08 spelled out with numbers like this.
> >
> >4216775 0611576 215556 7 3308011 3258576
> > 6 7 5 1 5 3 8 5 2 7 3
> > 8 3 6 5 0 4 1 2 7 0 5
> > 7 2 2 257873 5 7 4 1 3387715
> > 6 2 5 7 1 111500075 8 6 2 2
> > 8 2 2 7 7 3 2 656 0 3 0 8
> > 0 6430533 4 4 8 6 207 5412501 7637213
> >
> >
> >Does anybody know what this is about.
>
> Got 2 also.
>
> Wasn't there a stock image spam with TORA.TORA or something?
>
>
Re: I've got TORA.08 spelled with numbers?
Posted by Evan Platt <ev...@espphotography.com>.
At 07:44 AM 11/17/2006, you wrote:
>I'm getting a bunch of spams this morning that have
>TORA.08 spelled out with numbers like this.
>
>4216775 0611576 215556 7 3308011 3258576
> 6 7 5 1 5 3 8 5 2 7 3
> 8 3 6 5 0 4 1 2 7 0 5
> 7 2 2 257873 5 7 4 1 3387715
> 6 2 5 7 1 111500075 8 6 2 2
> 8 2 2 7 7 3 2 656 0 3 0 8
> 0 6430533 4 4 8 6 207 5412501 7637213
>
>
>Does anybody know what this is about.
Got 2 also.
Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
Posted by snowcrash+spamassassin <sc...@gmail.com>.
> There's another version too. To get around the rather obvious rule they
> enlarge the text, although that goes beyond their mailers linewrap so it
> comes through as:
heh. and this gets GMAIL to suggest:
"Would you like to...
Track FedEx package
708060336862"
i'm sure glad FedEx are getting real value out of Google's
store-n-scan targeted advertising! ;-)
Re: I've got TORA.08 spelled with numbers?
Posted by Kevin Golding <ke...@caomhin.demon.co.uk>.
In article <69...@sixer>, Jeff Moss
<jm...@Huffmancorp.com> writes
>I'm getting a bunch of spams this morning that have
>TORA.08 spelled out with numbers like this.
There's another version too. To get around the rather obvious rule they
enlarge the text, although that goes beyond their mailers linewrap so it
comes through as:
60761288437850124 842345666818 07133214121161 160486
58682160556 34575182333042
44514236815811001 67528045152433 0762781627380476 33612422
67671035371331 023403061766111
17028 14872 04437 0404 2008 0233573120
80352 75457 8256 8407
01032 51227 73430 0771 7880 4083
1666 60553 44245 1775 2870
84233 53466 81017 7733288667523130 6714
1711 60287 24455 82380267308245
64076 72860 72052 21861042701476 541767
38635 08738 11704 254005757165868
21860 22861 74276 708060336862
045716686767712 64333 48064 8148 4041
01435 86460 31050 7215 7804
5565387276758154 27387 16454 5768 024
73126 84148 88800 2346 10063 11725
4345 87674 37284 66704 6742 0761
18147 20700125024350 5827 6166 65660
7746 57425 86006726651265 547158426214068
37461 600858508742 5301 7071 81377
2710 30153 863422407306 36516470124543
Looks like I need to get counting again.
Kevin
RE: I've got TORA.08 spelled with numbers?
Posted by "Suhas Ingale (QualiSpace)" <su...@qualispace.com>.
Even I have started getting it.
Have any one cracked any rules for this?
Warm Regards,
Suhas
System Administrator
QualiSpace - A QuantumPages Enterprise
An ICANN Accredited Domain Registrar
===========================
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
===========================
For Any Technical Query Please Use: http://helpdesk.qualispace.com
QualiSpace Community Discussion forum: http://forum.qualispace.com
-----Original Message-----
From: Jeff Moss [mailto:jmoss@Huffmancorp.com]
Sent: Friday, November 17, 2006 9:15 PM
To: users@spamassassin.apache.org
Subject: I've got TORA.08 spelled with numbers?
I'm getting a bunch of spams this morning that have
TORA.08 spelled out with numbers like this.
4216775 0611576 215556 7 3308011 3258576
6 7 5 1 5 3 8 5 2 7 3
8 3 6 5 0 4 1 2 7 0 5
7 2 2 257873 5 7 4 1 3387715
6 2 5 7 1 111500075 8 6 2 2
8 2 2 7 7 3 2 656 0 3 0 8
0 6430533 4 4 8 6 207 5412501 7637213
Does anybody know what this is about.
Regards
Jeff Moss