Here's an update on the spam flood we've been seeing on .edu domains.

Although the rate of new spamvertized .edu domains has somewhat slowed down, we are still seeing new spam. Much, if not all, of it is sent through botnets, but the spamming characteristics differ a bit:

• There's the moderate html spam which you can see on the spammy revisions of this wiki page. The spam is formatted in html with a-href tags and is sent out with a moderate frequency.
• There's the brutal html spam which uses different form elements for the pay load, which is still html-formatted (Example).
• And finally, we have the massive forum spam: this one is formatted to create valid links on web forums and the spammer seems to be posting each link he owns with each spammy post.

And here's a list of the .edu domains I could find among all the crap.

• abbc.edu
• academics.smcvt.edu
• applyforit.ucsd.edu
• bbs.cuesta.edu
• bio.research.ucsc.edu
• boole.cs.iastate.edu
• cahn.mnsu.edu
• chaucer.umuc.edu
• ctl.csudh.edu
• cosmicray.umd.edu
• courses.csusm.edu
• cscserver.cc.edu
• dental.gulfcoast.edu
• discussions.csbsju.edu
• ecomm1.csug.rochester.edu
• edonline.ua.edu
• education.beta.edgewood.edu
• education.uncc.edu
• escher.isis.vanderbilt.edu
• faculty.deanza.fhda.edu
• faculty.etsu.edu
• faculty.hope.edu
• faculty.oxy.edu
• faculty.ugf.edu
• faculty.whatcom.ctc.edu
• facweb.cs.depaul.edu
• forum.kharkiv.edu
• groups.ku.edu
• hal.engr.smu.edu
• hcgs.unh.edu
• intra.som.umass.edu
• intranet.education.umn.edu
• itp.nyu.edu
• journal.eepis-its.edu
• kelley.iu.edu
• kybele.psych.cornell.edu
• lincweb.cacs.louisiana.edu
• list.eng.utah.edu
• lists.gatech.edu
• main.g2.bx.psu.edu
• manila.tntech.edu
• meweb.ecn.purdue.edu
• modlang.boisestate.edu
• nsstc.uah.edu
• orgs.indianatech.edu
• pec1.jun.alaska.edu
• people.msoe.edu
• reshall.iweb.bsu.edu
• scripts-cert.mit.edu
• sensorscity.marshall.edu
• seo.ohsu.edu
• sg.wilkes.edu
• socsci.mccneb.edu
• staff.jccc.edu
• sts.ucsd.edu
• sudanportal.mrcc.aast.edu
• uwacadweb.uwyo.edu
• vets.appliedphysics.swri.edu
• vue.uit.tufts.edu
• web.missouri.edu
• web.scc.losrios.edu
• web.skku.edu
• wsuonline.weber.edu
• wuconweb.wustl.edu
• www2.cs.washington.edu
• www4.vjc.edu
• www.aet.cup.edu
• www.ags.uci.edu
• www.chaco.gov.ar
• www.coe.ohio-state.edu
• www.csulb.edu
• www.cucsur.udg.mx
• www.depts.ttu.edu
• www.grad.english.ttu.edu
• www.hcs.harvard.edu
• www.imperial.edu
• www.isis.vanderbilt.edu
• www.jhu.edu
• www.leal-alfa.upc.edu
• www.ns.ui.edu
• www.oswego.edu
• www.oznet.ksu.edu
• www.polisci.berkeley.edu
• www.rit.edu
• www.rso.cmich.edu
• www.sccs.swarthmore.edu
• www.tamug.edu
• www.ug.it.usyd.edu.au
• www.uky.edu
• www.wvup.edu
• xnews.soad.umich.edu

If you know anyone working as an admin in one of those institutions, please contact him or her. Tell them to secure their crappy forums and webinars. Please.

¶ 11:19