<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>I Am Security &#187; spam</title>
	<atom:link href="http://www.iamit.org/blog/tag/spam/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.iamit.org/blog</link>
	<description>Security news and research</description>
	<lastBuildDate>Mon, 26 Jul 2010 09:20:36 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=abc</generator>
<cloud domain='www.iamit.org' port='80' path='/blog/?rsscloud=notify' registerProcedure='' protocol='http-post' />
		<item>
		<title>Twitter spam &#8211; Spitter? Tpam?</title>
		<link>http://www.iamit.org/blog/2009/07/twitter-spam-spitter-tpam/</link>
		<comments>http://www.iamit.org/blog/2009/07/twitter-spam-spitter-tpam/#comments</comments>
		<pubDate>Mon, 06 Jul 2009 17:18:22 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[malweb]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[social network]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[twitter]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=180</guid>
		<description><![CDATA[Unless you&#8217;ve been living under a rock in the past couple of years, you have been exposed to Twitter in some shape or form. Having adopted the means of socializing myself not too long ago (been researching it&#8217;s security since day-0, jumped on the bandwagon a few months ago), you have to live with the [...]


Related posts:<ol><li><a href='http://www.iamit.org/blog/2009/09/malicious-ads-circa-2007/' rel='bookmark' title='Permanent Link: Malicious ads circa 2007'>Malicious ads circa 2007</a></li>
<li><a href='http://www.iamit.org/blog/2009/09/two-steps-forward-one-step-back-controling-botnets/' rel='bookmark' title='Permanent Link: Two steps forward, one step back &#8211; controling botnets&#8230;'>Two steps forward, one step back &#8211; controling botnets&#8230;</a></li>
<li><a href='http://www.iamit.org/blog/2009/12/mapping-and-security-research/' rel='bookmark' title='Permanent Link: Mapping and Security Research'>Mapping and Security Research</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Unless you&#8217;ve been living under a rock in the past couple of years, you have been exposed to Twitter in some shape or form. Having adopted the means of socializing myself not too long ago (been researching it&#8217;s security since day-0, jumped on the bandwagon a few months ago), you have to live with the bad aspects of social networks again.</p>
<p>When you finally think that a social network platform would get immune from the perils of spam and malicious content, it&#8217;s funny to see how spammers &#8211; especially on the adult content side have been using Twitter to peddle their stuff&#8230; Instead of Tweeting it again (<a href="http://twitter.com/iiamit/status/2404011102">http://twitter.com/iiamit/status/2404011102</a>), I decided to pay respects with a full blog post.</p>
<p><img class="alignnone size-full wp-image-181" title="spitter" src="http://www.iamit.org/blog/wp-content/uploads/2009/07/spitter.png" alt="spitter" width="447" height="176" /></p>
<p>So here are my 2 new followers (the one mentioned on my older tweet has fled &#8211; probably didn&#8217;t get what they signed up for <img src='http://www.iamit.org/blog/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' />  ), I&#8217;ll be sure to keep checking out these trends and make sure that nothing beyond the traditional and mostly harmless content (unless you consider NSFW dangerous &#8211; no malweb so far there).</p>
<p>See you all in Vegas (<a href="https://www.defcon.org/html/defcon-17/dc-17-speakers.html#Amit">https://www.defcon.org/html/defcon-17/dc-17-speakers.html#Amit</a>)!</p>
<p><strong>Update</strong>: OK, this can go out in the open now (had to make sure that this went public already&#8230;) pushing malweb through Twitter has been going on for a while, a funny example below shows the usage of the same malicious URL being pushed by &#8220;foot soldiers&#8221; across multiple trending topics as they change over time:</p>
<p><img class="alignnone size-full wp-image-184" title="maltweet1" src="http://www.iamit.org/blog/wp-content/uploads/2009/07/maltweet1.png" alt="maltweet1" width="594" height="794" /></p>
<p>And the Tweet of the day for me is an attempt to &#8220;whore&#8221; the trending topics in order to promote an adult site:</p>
<p><img class="alignnone size-full wp-image-185" title="trendwhoring" src="http://www.iamit.org/blog/wp-content/uploads/2009/07/trendwhoring.png" alt="trendwhoring" width="590" height="97" /></p>
<p>Obviously all the keywords at the time this was published were on the trending top list&#8230;</p>


<p>Related posts:<ol><li><a href='http://www.iamit.org/blog/2009/09/malicious-ads-circa-2007/' rel='bookmark' title='Permanent Link: Malicious ads circa 2007'>Malicious ads circa 2007</a></li>
<li><a href='http://www.iamit.org/blog/2009/09/two-steps-forward-one-step-back-controling-botnets/' rel='bookmark' title='Permanent Link: Two steps forward, one step back &#8211; controling botnets&#8230;'>Two steps forward, one step back &#8211; controling botnets&#8230;</a></li>
<li><a href='http://www.iamit.org/blog/2009/12/mapping-and-security-research/' rel='bookmark' title='Permanent Link: Mapping and Security Research'>Mapping and Security Research</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.iamit.org/blog/2009/07/twitter-spam-spitter-tpam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
