I keep seeing messages posted by a new user, where it's just a line from someone else's post in the thread copied and pasted with "http://www.*******.info/imgs/signature_deepthakur.jpg" added onto the end. Google finds 164 of these posts all over the web. The URL of the image is http://www.*******.info/imgs/signature_deepthakur.jpg. *******.info appears to be someone failing to setup an affiliate marketing site. These messages are weird as they don't actually have a link in them (spammers are getting dumber!?) and they're starting to annoy me, especially when they're double/triple posted in a thread! To the credit of the mods, they're getting deleted pretty quickly, but what the hell is going on?
They maybe have there "pay load" in there sig but since they're not allowed to have sigs they don't show.
I viewed one via the front site (images are turned to links in the comments of articles) and was redirected to amazon. I presume with some affiliate cookie installed thereafter.
Yeah, we have seen an increase lately. Fortunately most are highlighted to the mods via the forum spam filtering system, and placed into a moderation queue, preventing them from being made visible. The remainder we pick up either through observation or by being notified by other members. So thanks to all who use the report a post button.
I deleted a banned one of these today already, if you see them please remember to use the report post button.
I have been reporting them., but as an amateur webdeveloper I take an interest in things like this (XSS and such), I just couldn't find out how the payload was delivered (my suspicions were the image, but I'm still working on the Wireshark logs - I have beeter things to do ATM).
