Ask HN: What is this spam email's motive?
4 comments
Suppose that beyond confirmation that you actually received and looked at the email, they don't learn a lot. Might be they aren't even interested in identifying the receiver, just some rough estimate on whether they're able to pierce through spam filters.
More interesting hints might be in the accompanying text. What kind of content was used to lure you into amazon.co.jp? What was the sent-from / reply-to info?
My impression is that spam is usually unsophisticated and amateur. They intentionally raise transaction costs by looking inauthentic, to weed out wary victims because those will just be a pain when they finally need to trick them into believing they should pay $10,000 to receive a million.
More interesting hints might be in the accompanying text. What kind of content was used to lure you into amazon.co.jp? What was the sent-from / reply-to info?
My impression is that spam is usually unsophisticated and amateur. They intentionally raise transaction costs by looking inauthentic, to weed out wary victims because those will just be a pain when they finally need to trick them into believing they should pay $10,000 to receive a million.
Yep good points. So they send it from some variant of my name like "[email protected]" (feels similar to using the same area code for a spam call). There's no explicit reply-to. Based on the translations it's one of those "your card failed to be used for a purchase" type emails.
I think your idea of it being a rough estimate seems simple and likely.
I think your idea of it being a rough estimate seems simple and likely.
> * Hope someone tries to access their SSH?
Never attribute to malice that which is adequately explained by stupidity.
Never attribute to malice that which is adequately explained by stupidity.
Most likely to know if that email was opened and the user was indeed tricked to click the link, so maybe later “promoting” your email into the actual phishing email list.
Taking all of this at face value, what's their game here?
* Collect data on IP addresses as silly as me to click through links?
* Hope someone tries to access their SSH?
* Wait for someone to load an image in their email that has some 0-day?