Comment on What is the point of the Nicole spam?

• null_dot@lemmy.dbzer0.com ⁨2⁩ ⁨days⁩ ago

  I understood you the first time. My point is, it’s nonsensical.

  If you’re sending emails to potential victims you want as many responses as you can get.

  It’s an absurdity to suggest that typing errors would intelligently select for people more likely to be scammed.

  source

  • CTDummy@lemm.ee ⁨1⁩ ⁨day⁩ ago

    I’m not arguing about this. Especially not with a baby account. This is an opinion informed by expert opinion on the matter, and I work in tech. If you think it’s “nonsensical” that’s on you.

    However, the reason why phishing emails have so many typos is simple—they’re intentional and are included by design. The scammer’s goal is to send phishing emails to a very gullible, innocent victim. If they have typos, they’re essentially weeding out recipients too smart to fall for the scam.

    Source.

    source

    • null_dot@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

      Oh boy. Sure ok you must know everything about security and spam and scammers because you “work in tech”. Honestly, telling people that doesn’t make you sound any more credible.

      Did you honestly just google “scammer typos” so you could provide me with an expert source?

      You’re making a very simple assertion - that typos weed out potential victims who are gullible enough to fall for a nigerian prince scam with no typos, but not gullible enough to follow through to actually paying the scammer.

      It’s a preposterous claim with absolutely no evidence supporting it. Any idiot can see it doesn’t withstand a moment’s thought.

      On the other hand, it’s demonstrably true that typos can help to evade bayesian filters.

      The actual situation, which both you and mr security blog guy have gravely misunderstood, is that including typos in order to evade filters improves response rates because it improves deliverability and does not discourage a significant number of victims.

      Er go, the type of people who become victims are not likely to be discouraged by typos.

      That’s not the same as including typos in order to discourage people who are not good victims.

      source

      • CTDummy@lemm.ee ⁨1⁩ ⁨day⁩ ago

        Never claimed that, said that because that’s why I’m aware of it, not that it indicates any authority.

        Did you honestly just google “scammer typos” so you could provide me with an expert source?

        Not quite but pretty much yep. Given you claimed it was “nonsensical” I had hope me showing sources that weren’t just my saying so might make you reconsider your position. Perhaps unsurprisingly, it didn’t.

        It’s a preposterous claim with absolutely no evidence supporting it. Any idiot can see it doesn’t withstand a moment’s thought.

        You’re free to google “scammer typos” and check out the results yourself given there seems to be nothing I can do or link to convince that this is a silly hill to die on.

        is that including typos in order to evade filters improves response rates because it improves deliverability and does not discourage a significant number of victims.

        What filters are these? I’ll have to keep an eye out for the grammar section in the inbound spam/phishing policies next time I’m managing a client in the exchange section of their tenant. Bad luck for those who don’t spell well, can’t use spell check or are ESL, I guess. Mistyped URL or domain however sure are a thing.

        Er go, the type of people who become victims are not likely to be discouraged by typos.

        *Ergo. I guess you’ve made up your mind, based on god knows what. I’ll leave with a link from a university’s IT department from your google search terms, feel free to look at the rest of them any time you like.

        It’s on purpose. If you can spot it, they don’t want you.

        But what would the opinions based on another “Mr security guy”, aka a Microsoft researcher know.

        source

        • -> View More Comments
      • Feyd@programming.dev ⁨1⁩ ⁨day⁩ ago

        If their claim is so preposterous then why are they providing sources and you’re not. Writing longer and longer walls of text and being more and more disrespectful isn’t going to convince anyone. If you have evidence just provide it instead of insisting is exists.

        source